Dependency versions narrowed again