You don't need to pin them forevermore -- just when you don't want everything to break unexpectedly :). When you want to upgrade your dependencies, then go ahe

You don't need to pin them forevermore -- just when you don't want everything to break unexpectedly :). When you want to upgrade your dependencies, then go ahead and do that, on your own schedule, with time and space to fix whatever issues come up, update your tests, QA, etc.