Use more specific dependency versions

There are still 3 failing assertions, but this should make building more consistent between machines.