freeze dependent library version