[18:29:30] <GothAlice> On my own side, we pin everything, though we try to range pin rather than pin to specific versions. E.g. if a package has guaranteed that patch releases (1.0.x) and single feature releases (1.x) will not break compatibility, if the current version is 1.2.3, we pin <1.3 in setup.py.
[18:31:41] <GothAlice> At 1.2.3, 1.3 may introduce deprecation warnings, but won’t actually eliminate the deprecated material until the subsequent major or feature release. (2.0 or 1.4 respectively.)