Right. But it was a transitive dependency of pytest-run that bit us, right? What I'm saying is find out what all the transitive deps of those things are and then pin them.