Lock dependencies version