Pin mccabe to prevent it from breaking hacking

mccabe has undergone some very significant bug fixes recently but has
not yet released a new version. When it does, complexity calculations
will change in potentially significant ways.

Change-Id: I6e75391da19fde45588575517087d1ba4e4c44b7