pgmoon is a dependency, lock the lua version