Only accept patch changes

This should better prevent breakages by only allowing patch versions to get updated at install-time.