Update and freeze dependencies

I didn’t update `es6-module-transpiler` because the API has changed a lot and this could be a pull request on its own.