fixed versions for dependencies