lock down deps - refs #2401