Lock all dependency versions