pin cookbook versions in hash