pin known good combinations of segment deps

[wadejensen]

Motivated by:

We got caught on the wrong side of an awkward semver for two libraries.
They moved where messageId is added and due to shitty use of semver on Segment’s part, and the fact that fivetran’s fork doesn’t pin exact dependency versions, we managed to get a combination of dependency versions which don’t send a message id.

Oh the irony…

See
segment-integrations/analytics.js-integration-segmentio#55
segmentio/analytics.js-core#106

~/repos/analytics.js wade-pin-known-good-segment-deps
❯ grep -r "messageId" analytics.js
analytics.js:  // generate and attach a messageId to msg
analytics.js:  msg.messageId = 'ajs-' + md5(json.stringify(msg) + uuid());

[wadejensen]

cc @ArthurBaudry