bump up dependencies versions
extend from versions.cfg to enable pinning
use flake8 instead of pep8