Add upper bound to dependency version ranges