Pin package versions and use clean install methods

[malini]

To avoid pulling new packages and introducing security vulnerabilities, we will move to pinned package versions, and ensuring our ci/cd use clean installs that do not pull new packages.