remove mr.developer and pin current packages
pin everything to have a stable qa environment