Lock deps, add support for browser-serialport