chore: lock ci dependencies down