locking down versions more