deps: pin negotiator@0.4.3