Locks file with version numbers for deps