Pin versions of all major deps?

[adelavega]

Given that this is meant to be run in Google Colab rather than user environ, would it make sense to pin specific versions of all deps to prevent an upstream library from breaking this workflow?

We could define a github action that autoruns tests to confirm the notebook runs with the latest versions of all deps periodically (i.e. 1x a month or less), so we can upgrade the deps on a semi regular basis