pinned all dependencies