build: use exact versions for arrow and datafusion

[xushiyan]

Description

Use the exact version for core dependencies, arrow and datafusion, to prevent incompatible minor upgrade done implicitly.

How are the changes test-covered

• [ ] N/A
• [x] Automated tests (unit and/or integration tests)
• [ ] Manual tests
  • [ ] Details are described below

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 87.24%. Comparing base (3e71bb0) to head (734238b).

Additional details and impacted files

```diff @@ Coverage Diff @@ ## main #105 +/- ## ======================================= Coverage 87.24% 87.24% ======================================= Files 14 14 Lines 690 690 ======================================= Hits 602 602 Misses 88 88 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

[xushiyan]

pull_request_target trigger won't update until PR landed. The fix is effective as shown by the pull_request trigger.

Merging this to make the change effective for subsequent PRs.