lock to a specific version for real