chore(pubspec): tighten constraints on dependencies