Use versions for dependencies

Using `dev-master` in `composer.json` can lead to some nasty dependency conflicts when using it in projects without `"minimum-stability": "dev"`. This change also syncs the dependencies with the `bower.json` file.

A tagged release after the merge would be appreciated. :wink: