fix: freeze the dependency versions