Lock dependency versions.