tidy up dependency versioning