Locking dependencies down further