pom: depend on stable versions of tiny-async and tiny-serializer