locking yum dependency to < 3