lock bootstrap to 2.x for now