tighten the version deps