fix deps (with lock)