clamp down on run-time dependency version

this is mostly to avoid stumbling right before presentation. C/++ libs
are compiled at a specific version, i don't need pip upgrading the
python bindings and causing version miss-match.
always pull the latest code, while quickly developing