deps: use tilde deps pinning (patch-pin)