pin the versions