added version limits for dependencies