Lock dependencies to current major releases