pin salt at version 0.17.2