lock down versions