Lock down thor version dependency