lock dependency versions for faraday