Merge pull request #120 from pallets/requirements

use pip-compile to pin dev requirements