Don't lock requirement versions