peg all of the deps; fix for jsdom not pegging its deps