Use dependencies of haste-lib to pin down base and array versions.

Since we're using our own, slightly altered versions of these, we do NOT,
under any circumstances, want those packages upgraded.