Pin the version of Webmock

This is good practice, but I also want to check that the CI build pushes to the
release branch.