Update dependencies

If semver is followed, I don't see any reason to limit `useragent` to 2.0.x.
`semver` is set to `*` since `useragent` needs it but we'll never actually use it.