pin collective cover dependencies