Lock down dependency versions.