set exact versions of dependencies