lock all dependencies
Merge