Tech Debt: specify certain versions of xhtml2pdf and reportlab