Pinning

Also written: pin, pin the package, pin tool definitions

Fixing exact versions of packages and hashes of tool definitions so changes can't arrive unnoticed. You upgrade only on purpose, after review.