Pinning versions of dependencies