diff --git a/poetry.lock b/poetry.lock
index 9a387ac56d..9f99e15ee3 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:333c4b830ec0128732e0e72094c683de035ec2aebe93c8ebed0ff1763ed5d1e1
-size 766473
+oid sha256:9d7c148fcbb968b9a1fc8a5bbba6baaf14a8e80decc5da3c9dc3d88c6758c8b7
+size 778425
diff --git a/pyproject.toml b/pyproject.toml
index 1c9b0988e8..542f138921 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -11,167 +11,168 @@ documentation = "https://docs.comma.ai"
 
 [tool.poetry.dependencies]
 python = "~3.11"
-atomicwrites = "^1.4.0"
+atomicwrites = "*"
 casadi = "==3.6.3"
-cffi = "^1.15.1"
-crcmod = "^1.7"
-cryptography = "^37.0.4"
-Cython = "^3.0.0"
-flake8 = "^4.0.1"
-Flask = "^2.1.2"
-future-fstrings = "^1.2.0"  # for acados
-gunicorn = "^20.1.0"
+cffi = "*"
+crcmod = "*"
+cryptography = "*"
+Cython = "*"
+flake8 = "*"
+Flask = "*"
+future-fstrings = "*"  # for acados
+gunicorn = "*"
 hatanaka = "==2.4"
-hexdump = "^3.3"
-Jinja2 = "^3.1.2"
-json-rpc = "^1.13.0"
-libusb1 = "^3.0.0"
+hexdump = "*"
+Jinja2 = "*"
+json-rpc = "*"
+libusb1 = "*"
 numpy = "==1.23.0"  # locked pending deprecation fixes in xx
-onnx = "^1.14.0"
-onnxruntime-gpu = { version = "^1.15.1", platform = "linux", markers = "platform_machine == 'x86_64'" }
-pillow = "^9.2.0"
+onnx = ">=1.14.0"
+onnxruntime-gpu = { version = ">=1.15.1", platform = "linux", markers = "platform_machine == 'x86_64'" }
+pillow = "*"
 poetry = "==1.2.2"
-psutil = "^5.9.1"
-pycapnp = "^1.3.0"
-pycryptodome = "^3.15.0"
-PyJWT = "^2.5.0"
-pyopencl = "^2022.2.4"
-pyserial = "^3.5"
-python-dateutil = "^2.8.2"
-PyYAML = "^6.0"
-pyzmq = "^23.2.0"
-requests = "^2.28.1"
-scons = "^4.5.2"
-sentry-sdk = "^1.6.0"
-setproctitle = "^1.2.3"
-smbus2 = "^0.4.2"
-sounddevice = "^0.4.5"
-spidev = { version = "^3.6", platform = "linux" }
-spidev2 = { version = "^0.9.0", platform = "linux" }
-sympy = "^1.11.1"
-timezonefinder = "^6.2.0"
-tqdm = "^4.64.0"
-urllib3 = "^1.26.10"
-utm = "^0.7.0"
-websocket_client = "^1.3.3"
-polyline = "^1.4.0"
+protobuf = "==3.20.3"
+psutil = "*"
+pycapnp = "*"
+pycryptodome = "*"
+PyJWT = "*"
+pyopencl = "*"
+pyserial = "*"
+python-dateutil = "*"
+PyYAML = "*"
+pyzmq = "*"
+requests = "*"
+scons = "*"
+sentry-sdk = "*"
+setproctitle = "*"
+smbus2 = "*"
+sounddevice = "*"
+spidev = { version = "*", platform = "linux" }
+spidev2 = { version = "*", platform = "linux" }
+sympy = "*"
+timezonefinder = "*"
+tqdm = "*"
+urllib3 = "*"
+utm = "*"
+websocket_client = "*"
+polyline = "*"
 sconscontrib = {git = "https://github.com/SCons/scons-contrib.git"}
 
 
 [tool.poetry.group.dev.dependencies]
-av = "^10.0.0"
+av = "*"
 azure-storage-blob = "~2.1"
-breathe = "^4.34.0"
+breathe = "*"
 carla = { url = "https://github.com/commaai/carla/releases/download/3.11.4/carla-0.9.14-cp311-cp311-linux_x86_64.whl", platform = "linux", markers = "platform_machine == 'x86_64'" }
-control = "^0.9.2"
-coverage = "^6.4.1"
-dictdiffer = "^0.9.0"
-fastcluster = "^1.2.6"
-ft4222 = "^1.4.1"
-hexdump = "^3.3"
+control = "*"
+coverage = "*"
+dictdiffer = "*"
+fastcluster = "*"
+ft4222 = "*"
+hexdump = "*"
 hypothesis = "==6.46.7"
-inputs = "^0.5"
-lru-dict = "^1.1.7"
-lxml = "^4.9.1"
-markdown-it-py = "^2.1.0"
-matplotlib = "^3.5.2"
-mpld3 = "^0.5.8"
-mypy = "^1.4.0"
-myst-parser = "^0.18.0"
-natsort = "^8.1.0"
+inputs = "*"
+lru-dict = "*"
+lxml = "*"
+markdown-it-py = "*"
+matplotlib = "*"
+mpld3 = "*"
+mypy = "*"
+myst-parser = "*"
+natsort = "*"
 opencv-python-headless = { url = "https://github.com/commaai/opencv-python-builder/releases/download/4.5.5.64%2Bcu118-cp311/opencv_python_headless-4.5.5.64-cp311-cp311-manylinux_2_31_x86_64.whl", platform = "linux" }
-pandas = "^1.4.3"
-parameterized = "^0.8.1"
-paramiko = "^2.11.0"
-pprofile = "^2.1.0"
-pre-commit = "^2.19.0"
-pycurl = "^7.45.1"
-pygame = "^2.4.0"
-pylint = "^2.17.4"
-pyprof2calltree = "^1.4.5"
-pytest = "^7.1.2"
-pytest-xdist = "^2.5.0"
-reverse_geocoder = "^1.5.1"
+pandas = "*"
+parameterized = "^0.8"
+paramiko = "*"
+pprofile = "*"
+pre-commit = "*"
+pycurl = "*"
+pygame = "*"
+pylint = "*"
+pyprof2calltree = "*"
+pytest = "*"
+pytest-xdist = "*"
+reverse_geocoder = "*"
 scipy = "==1.9.3"  # pinned until xx refs changes can be checked
-sphinx = "^5.0.2"
-sphinx-rtd-theme = "^1.0.0"
-sphinx-sitemap = "^2.2.0"
-tabulate = "^0.8.10"
-tenacity = "^8.0.1"
-types-atomicwrites = "^1.4.5"
-types-certifi = "^2021.10.8"
-types-pycurl = "^7.45.1"
-types-python-dateutil = "^2.8.19.13"
-types-PyYAML = "^6.0"
-types-requests = "^2.28.11"
-types-tabulate = "^0.8.10"
+sphinx = "*"
+sphinx-rtd-theme = "*"
+sphinx-sitemap = "*"
+tabulate = "*"
+tenacity = "*"
+types-atomicwrites = "*"
+types-certifi = "*"
+types-pycurl = "*"
+types-python-dateutil = "*"
+types-PyYAML = "*"
+types-requests = "*"
+types-tabulate = "*"
 
 
 [tool.poetry.group.xx]
 optional = true
 
 [tool.poetry.group.xx.dependencies]
-aenum = "^3.1.11"
-aiohttp = "^3.8.1"
-albumentations = "^1.2.1"
-azure-cli-core = "^2.38.0"
-azure-common = "^1.1.28"
-azure-core = "^1.24.2"
+aenum = "*"
+aiohttp = "*"
+albumentations = "*"
+azure-cli-core = "*"
+azure-common = "*"
+azure-core = "*"
 azure-nspkg = "~3.0"
 azure-storage-common = "~2.1"
 azure-storage-nspkg = "~3.1"
 blosc = "==1.9.2"
-cloudpickle = "^2.1.0"
-configargparse = "^1.5.3"
-cupy-cuda11x = "^11.6.0"
-datadog = "^0.44.0"
-dotmap = "^1.3.30"
-einops = "^0.5.0"
-elasticsearch = "^8.3.1"
-Flask-Cors = "^3.0.10"
-Flask-SocketIO = "^5.2.0"
-GeoAlchemy2 = "^0.12.1"
-imageio = "^2.19.5"
-influxdb-client = "^1.30.0"
-ipykernel = "^6.15.1"
-ipython = "^8.4.0"
-joblib = "^1.1.0"
-json-logging-py = "^0.2"
-jupyter = "^1.0.0"
-jupyterlab = "^3.4.4"
-jupyterlab-vim = "^0.15.1"
-Markdown = "^3.4.1"
-msgpack-python = "^0.5.6"
+cloudpickle = "*"
+configargparse = "*"
+cupy-cuda11x = "*"
+datadog = "*"
+dotmap = "*"
+einops = "*"
+elasticsearch = "*"
+Flask-Cors = "*"
+Flask-SocketIO = "*"
+GeoAlchemy2 = "*"
+imageio = "*"
+influxdb-client = "*"
+ipykernel = "*"
+ipython = "*"
+joblib = "*"
+json-logging-py = "*"
+jupyter = "*"
+jupyterlab = "*"
+jupyterlab-vim = "*"
+Markdown = "*"
+msgpack-python = "*"
 networkx = "~2.8"
-nvidia-ml-py3 = "^7.352.0"
-onnx2torch = "^1.5.4"
-onnxoptimizer = "^0.3.1"
-osmium = "^3.3.0"
-pillow-avif-plugin = "^1.2.2"
+nvidia-ml-py3 = "*"
+onnx2torch = "*"
+onnxoptimizer = "*"
+osmium = "*"
+pillow-avif-plugin = "*"
 pipenv = "==2022.10.12"
-plotly = "^5.9.0"
-pycuda = "^2022.1"
-Pygments = "^2.12.0"
+plotly = "*"
+pycuda = "*"
+Pygments = "*"
 PyMySQL = "~0.9"
-pyproj = "^3.3.1"
-python-logstash = "^0.4.8"
-redis = "^4.3.4"
-s2sphere = "^0.2.5"
-scikit-image = "^0.19.3"
-scikit-learn = "^1.1.1"
+pyproj = "*"
+python-logstash = "*"
+redis = "*"
+s2sphere = "*"
+scikit-image = "*"
+scikit-learn = "*"
 segmentation-models-pytorch = "==0.3.3"
-simplejson = "^3.17.6"
-SQLAlchemy = "^1.4.39"
+simplejson = "*"
+SQLAlchemy = "*"
 torch = { url = "https://download.pytorch.org/whl/cu118/torch-2.0.1%2Bcu118-cp311-cp311-linux_x86_64.whl" }
-torchsummary = "^1.5.1"
+torchsummary = "*"
 torchvision = { url = "https://download.pytorch.org/whl/cu118/torchvision-0.15.2%2Bcu118-cp311-cp311-linux_x86_64.whl" }
-triton = "^2.0.0"
-Werkzeug = "^2.1.2"
+triton = "*"
+Werkzeug = "*"
 zerorpc = { git = "https://github.com/commaai/zerorpc-python.git", branch = "master" }
-omegaconf = "^2.3.0"
+omegaconf = "*"
 osmnx = "==1.2.2"
 tritonclient = {version = "2.28.0", extras = ["http"]}
-transformers = "^4.29.2"
+transformers = "*"
 timm = "==0.9.2"
 PyNvCodec = { git = "https://github.com/NVIDIA/VideoProcessingFramework.git", rev = "3347e55" }