pin deps to stable version

since @danbev rebased his branch, I've created a temporary tag