pin deps
Release 1.0.3
merge