force exact dependencies in nuget