Pin bumpr version to avoid config breakage with new versions