froze dep versions