set hard constraints on package versions

This should fix the intermittent failures that have been appearing, they seem to be due to an interaction between ghc-7.6.2 and hashable-1.2.0.6, using 1.2.0.5 resolves everything for me...