Lock karma dependencies