Pin dependencies versions but follow semver.