Use stable dependencies and make PHP version explicit.