Locking down dependency versions to latest at time of commit