fix dependency version restrictions