add lower bounds to dependencies