Explicitly set the SHAs of dependencies in the travis.yml file.