freeze at recent versions
Merge pull request #2 from alphagov/pipup

update packages and freeze at recent versions