Lock dependencies to performant versions