Lock a version of dependencies