use tilde instead of caret for dependency versioning