pin down rustc compiler and the dependency file too

[NicolasDP]

This will allow us to provide more guarantee that a given version of the rust compiler works with the associated versions of the libraries too.