Pin down dependencies