FIX: let's be more agnostic about dep versions until we find a reason to be more specific