Allow any patch version of task-lists dependency

This allows roaster to use the latest task-lists npm, which has licensed dependencies.