Restrictively pin module versions