Lock down dependencies to non-breaking changes.

Signed-off-by: Madhura Bhave <mbhave@gopivotal.com>