use versioned reference to tracking library dependency