freeze requirements, some dependencies have released breaking major versions