Where patched package versions are necessary do not pin