be less pessimistic about dependency versions