gradle: pin dependency version, plugin com.android.library