Lock deps into versions.