it is a pin to a specific version versus allowing minor and patchlevel upgrades