Fix colors dependency to 1.4.0 exactly

[donmahallem]

Due to this 'controvery' currently appnest is broken if one doesn't lock colors himself. Would be great if you could atleast temporarly remove the minor version scope from the dependency or replace with some other.

[keerl]

+1 would like to see this merged and published asap. This breaks dozens of open-source projects I help maintain.

[brianespinosa]

@andreasbm this is a pretty important security fix. It looks like @donmahallem already has a fork with the small change. Any chance we could get a PR in for this security fix ASAP? I am also happy to make an official PR if that will help move things along.