extract requirements to text file + pin dependencies
update dependencies