add hiredis, pin all current package versions