Should we pin our dependencies?

[Yoric]

Generally, pinning dependencies is a good way to avoid breakages when the dependency decides to make a breaking change.

So, I'd be in favor.

@RolandMacDoland ?

[RolandMacDoland]

Not too sure. IMHO, we should not pin to constantly be on top of the latest releases (for obvious security and usability reasons) and tackle breaking changes as soon as possible. If there is a new release that breaks our code, then we can pin for the before last (or any prior working version) to allow us for some time to fix the breakage while maintaining our code in a working state.