core: pin downloads to v1.4.3 to ensure users get a tested, stable build instead of potentially unstable latest releases