use caret version specifier for post-1.0 dependencies