deps: explicit version-locking (for dedupe)
release: 1.0.1 - explicit versioning for dep