don't update dep versions