Lock dependencies versions