lock down dependencies
update for new sprout version