More sercure deps pulling

Regarding issue #10

While wright now project compile without problems, pulling `master` for other deps can break build in any  moment (with any change in their repo) and seems to be anti-pattern. So I've added by-commit version selection to all possible deps.

And it is worth nothing, that those have to be by commit, because all of those don't use tags.  So __huge kudos__ for you and your repository structure.