be more specific in dependency versions