don't lock down dependencies

as a library this is more painful than it's worth; travis should check
for compatibilities for other libraries anyway