lock boto to current latest version