add version pins for new dependencies
Merge branch 'develop' into qa

* develop:
  add version pins for new dependencies