kpm restore downloads the latest version for indirect dependencies without version