version rev and locked deps