pin deps

probably the best thing, otherwise `wall` might break suddenly.

Also, you should tag `bredele/emitter-queue` so we can pin that dependency too, for usage with duo

Thanks