Lock some dependencies, fixes #2