firm up dep versions to what they will (eventually) be.