I asked: > pinning is generally Bad... is that correct? >
To answer my own question: No! From the Gradle docs it seems *pinning dependencies is a best practice*. We might want to use a version catalog <https://docs.gradle.org/current/userguide/best_practices_dependencies.html#do_this_instead> and/or platforms <https://docs.gradle.org/current/userguide/dependency_versions.html#sec:declaring-without-version> and locking <https://docs.gradle.org/current/userguide/dependency_locking.html> if we want reproducible builds.
