lock requirejs dependency at 1.0