freeze some requirements' versions