loosened random upper bound
bumped dep