Lock dependency versions to ensure correct builds

[SantiMunin]

http://begriffs.com/posts/2014-10-25-creating-package-hackage.html (step 6)