we should probably lock down all these versions