fix library version in pipfile

[longshuicy]

Right now we use wild card without specify a version. This causes github action failing from time to time.

Here is a temp fix #460 that fixes typo and freeze the pipfile.lock