Fix pinned package versions