Bump/pin deps