pin component versions