lock down some versions