limiting our dependency version