fix: use stable version constraints for internal packages