Use pessimistic version constraint; Docker smarter