(Though not all targets in our repo use the same versions of jars… so we can’t just pin all transitive deps globally, at least for now 😞)