Make dependency versions explicit