Pin dependencies to exact version

[Uzlopak]

Prerequisites

• I have written a descriptive issue title
• I have searched existing issues to ensure the issue has not already been raised

Issue

The issues in @swc/core, which i faced in #480 show, that we should pin the dependencies. Then dependabot can create PRs and we can detected if a new minor or patch version of one of the ts engines breaks.

[Eomm]

I would say no, until we have an automatic release process, because it requires to release this module everytime.

[jsumners]

I understand both sides of the argument, and from an application developer perspective it would be good if our tooling could ignore semver qualifiers to simply install the minimum required version for everything. But as a library developer, the chores that become required by using bare versions is too much.