locked versions of dependent cookbooks