Lock down more dependencies