Force 1.8.7 and 1.9.2 to -head for security reasons. Fixes #2801