match dependency-versions used in webapp