Remove version bounds on dependencies.

I'm not entirely certain that there should be bounds at all, since we should just be using the latest of everything in a sandbox, unless a specific package is known to be broken. What do you think, @strager?

Closes #128.