nail down deps