update zope.component and zope.interface, annotate why we use those v…

…ersions.

versions.cfg

@@ -24,6 +24,8 @@ coverage = 3.7.1
 zdaemon = 4.1.0
 transaction = 1.4.4
 Sphinx = 1.3.6
+zope.component = 3.12.1
+zope.interface = 4.2.0
 # required for recent z3c.form and chameleon
 zope.pagetemplate = 3.6.3
 # Support for more complex catalog queries
@@ -325,3 +327,11 @@ plone.app.drafts                      = 1.1.1
 plone.app.tiles                       = 2.2.1
 plone.tiles                           = 1.8.0
 plone.app.ldap                        = 1.4.0
+
+[versionannotations]
+# keep this alphabetical please
+zope.interface =
+    Starting with 4.3.0 hashing in (un-)registerUtility was changed.
+    This leads into "TypeError: cannot create weak reference to 'Acquisition.ImplicitAcquisitionWrapper' object".
+zope.component =
+    Major changes in 4.0.0, needs check if we can run Plone with them, stick with 3.12.1