use managed dependency versions