What if there were a way to run an out-of-band step to resolve all the transitive dependencies of a

managed_jar_dependencies

set of pinned jars, save that to a file (maybe check it into source control) and use that to pin transitive versions for that set of

managed_jar_dependencies

?