I still check in my runtime dependencies (build time tools are fetched dynamically) and fight anyone who wants to do otherwise.

QA only tested with these specific versions. You're damned right we're only shipping with those exact versions.