make dependencies use looser versions