nailed versions of dependencies