release dependency version freeze