Well, I guess you can choose whichever poison you like. Pinning isn't meant to be a forever type of commitment. You're just saying, "all works as expected wit

Well, I guess you can choose whichever poison you like. Pinning isn't meant to be a forever type of commitment. You're just saying, "all works as expected with this particular permutation of library code underneath." And the moment your dependencies release their hot-new you can retest and repin. Otherwise you're flying blind and this type of issue will arise without fail.