Nix. It's the best I've seen for this use case so far. I pin the dependencies using flakes and make container images with specific packages I need It's not 100

Nix. It's the best I've seen for this use case so far. I pin the dependencies using flakes and make container images with specific packages I need It's not 100% perfect for managing exact versions because you update nixpkgs and many packages update as a result, but you can pretty easily pin multiple versions of it or override the version for a specific package