Pin dependencies to specific versions