Would there be a way for us to do something with python requirements like what 4sq has done for jar resolution? At the time of making the release of pants, resolve all of the python libraries and their transitive deps, record those versions and pin them? That way a new release like this couldn't change the resolution.