Pin all packages to exact versions