lock depdendencies