Pin dependency versions