fixed versions of deps