don't specify dependency versions