nail down library versions