use specific version instead of HEAD for some deps