Not disagreeing, but IME much more often I have to run something that locks specific versions of their python dependencies because ... well ... why not -- kool kids run everything in a virtual environment anyway.

Version locking is a powerful tool that should be used very sparingly. My 2c.