Make sure we only use compatible versions of our dependencies

Specifically websockets package is risky here, since we extend and override parts of its API to provide proxy support, and the upstream is doing major refactoring of the code that is likely to render our extension incompatible.