Use ~ for dependencies

This allows some leeway in resolving bugfix releases.