Explicit dependency versions

[micheljung]

Without specifying versions, we're gambling and builds are not reliably reproducible.
We should explicitly define the version of each dependency.

[Askaholic]

Fixed by #421