use stable tags for dependencies