loosen dependency version