latest smarty version seems to fix the issue that forced me to lock the patch version, so using a wildcard for the patch version again