Remove GitHub-based dependencies

This project has dependencies on the `master` branches of several GitHub repositories, including those from third parties. This raises the risk of accidental (or, theoretically, deliberate) breakage. All the gems have released versions available, so we should use those instead.
This looks like a version change from what was previously constrained.  Is there a reason to be using a release candidate over a released version 3.0.x?