it is too toilsome to update dependencies. It would be nice to have a way to specify to use the latest version of any dep (of if you want it locked).