tighten dependencies