Pin 3rdparty module to specific versions/tags