Issue 811 pin lib versions

fixes #811 

it is better style to pin versions to a range.
I excluded the test-only libs from pinning because they should be only needed for tests and not production running.