locking down versions