Simplify package requirements.

This drops the pinned versions (which aren't really needed anymore) and pulls
out several transitive deps (to avoid overspecifying dependencies).