bump restrictive dependencies