Allow locking of dependency versions