Deps

 use specific version instead of HEAD for some deps