Lock deps on stable versions