add explicit version numbers to dependencies