Explicitly restrict to patch versions of deps