lock bo dependency