Bump dependencies and define/lock versions.
Update README.md with ENV info.