Allow using vharbuzz 0.3.*

[khaledhosny]

It is not clear why we are allowing only 0.2.*, since we don’t seem to use any API that was removed in 0.3.0, and all the tests pass.

Checklist

• [ ] update CHANGELOG.md
• [ ] wait for the tests to pass
• [ ] request a review