Pin down requirement version numbers for stability

I keep seeing noise in bin/diff (differences in indentation, for
example, when distutils produces its document information block) and
hopefully pinning my dependency versions will help reduce the noise.