document version pinning for new dependencies