Fixes #427 (closed).
Core package can allow newer dependencies even if we have fixed them program-wide.