Use versions for dependencies

Using `dev-master` in `composer.json` can lead to some nasty dependency conflicts when using it in projects without `"minimum-stability": "dev"`. This change also syncs the dependencies with the `bower.json` file.

A tagged release after the merge would be appreciated. :wink: 
Does `~3.0` mean `3.0.x`? It'd be better to be `3.x.x`.

Sorry, someone else requested `composer` support and I have never used it for JS nor did I really create this file. So it does kind of get treated as a 2nd class citizen... sorry!