component.json: Pin and update deps