shouldn't we pin these versions?