[JOSS REVIEW #7306] Pin the dependencies

[mberacochea]

Hi,

The setup.py file includes the tool dependencies, but they are not pinned to specific versions. Please pin the versions, as this will improve the stability of the packages; new versions of the dependencies may break Mashpit.

Additionally, Python has been gradually moving from setup.py to pyproject.toml as part of the packaging revamp. I would suggest migrating to pyproject.toml (https://packaging.python.org/en/latest/tutorials/packaging-projects/).

openjournals/joss-reviews#7306

Cheers

[tongzhouxu]

Mashpit is converted to pyproject.toml in v0.9.8. The dependencies were pinned in the pyproject.toml