pin all requirements so heroku installs newest version