fix: publish internal dependency ranges as ^x.y.z instead of exact pins

fix: publish internal dependency ranges as ^x.y.z instead of exact pins #3573