explicit versions on dependencies