newer pandas requires newer numpy, so pin pandas