The dependency tree pins many versions to a patch number, makes it too fragile with how often the packages get bumped.