Pin released Shibboleth dependencies.