force dependency versions