updating dependency packages with constraints