lock in mocha and minitest versions