Pin dependencies to versions which don't break us.