Update and pin dependencies