With the '^x.y.z' semantics, the version can upgrade out from under us and change dependencies, so this pins to an exact version.