Move dependencies with pinned version out of env.in files (#571)

TRNWWZ · Ruinong Tian · web-flow · commit b278304a48e8 · 2025-03-04T16:39:12.000-08:00
Co-authored-by: Ruinong Tian &lt;ruinon@dev-dsk-ruinon-2a-ba2bf164.us-west-2.amazon.com&gt;
diff --git a/.github/workflows/PR_TEMPLATE.md b/.github/workflows/PR_TEMPLATE.md
@@ -1,5 +1,6 @@
 This pull request was created by GitHub Actions/AWS CodeBuild! Before merging, please do the following:
 - [ ] Review changelog/staleness report.
-- [ ] (Only for Minor/Major version releases) Review python package dependency and size report.
+- [ ] Review pinned_env.in files, when releasing Major/Minor version, try removing entries from there and build images.
+- [ ] Review python package dependency and size report.
 - [ ] Review build/test results by clicking *Build Logs* in CI Report (be patient, tests take ~4hr).
 - [ ] Review ECR Scan results.
diff --git a/build_artifacts/v1/v1.12/v1.12.2/Dockerfile b/build_artifacts/v1/v1.12/v1.12.2/Dockerfile
@@ -3,6 +3,7 @@ FROM mambaorg/micromamba:$TAG_FOR_BASE_MICROMAMBA_IMAGE
 
 ARG CUDA_MAJOR_MINOR_VERSION=''
 ARG ENV_IN_FILENAME
+ARG PINNED_ENV_IN_FILENAME
 ARG ARG_BASED_ENV_IN_FILENAME
 ARG IMAGE_VERSION
 
@@ -84,16 +85,17 @@ RUN mkdir -p /etc/code-editor/extensions && \
 
 USER $MAMBA_USER
 COPY --chown=$MAMBA_USER:$MAMBA_USER $ENV_IN_FILENAME *.in /tmp/
+COPY --chown=$MAMBA_USER:$MAMBA_USER $PINNED_ENV_IN_FILENAME *.in /tmp/
 
-# Make sure that $ENV_IN_FILENAME has a newline at the end before the `tee` command runs. Otherwise, nasty things
-# will happen.
+# Make sure that $ENV_IN_FILENAME and $PINNED_ENV_IN_FILENAME has a newline at the end before the `tee` command runs.
+# Otherwise, nasty things will happen.
 RUN if [[ -z $ARG_BASED_ENV_IN_FILENAME ]] ; \
     then echo 'No ARG_BASED_ENV_IN_FILENAME passed' ; \
     else envsubst < /tmp/$ARG_BASED_ENV_IN_FILENAME | tee --append /tmp/$ENV_IN_FILENAME ; \
     fi
 
 ARG CONDA_OVERRIDE_CUDA=$CUDA_MAJOR_MINOR_VERSION
-RUN micromamba install -y --name base --file /tmp/$ENV_IN_FILENAME && \
+RUN micromamba install -y --name base --file /tmp/$ENV_IN_FILENAME --file /tmp/$PINNED_ENV_IN_FILENAME && \
     micromamba clean --all --yes --force-pkgs-dirs && \
     rm -rf /tmp/*.in
 
diff --git a/build_artifacts/v1/v1.12/v1.12.2/cpu.env.in b/build_artifacts/v1/v1.12/v1.12.2/cpu.env.in
@@ -52,6 +52,3 @@ conda-forge::sasl[version='>=0.3.1,<0.4.0']
 conda-forge::thrift_sasl[version='>=0.4.3,<0.5.0']
 conda-forge::pyhive[version='>=0.7.0,<0.8.0']
 conda-forge::python-gssapi[version='>=1.9.0,<1.10.0']
-conda-forge::libmamba[version='<2.0.0']
-conda-forge::evaluate[version='<0.4.2']
-conda-forge::catboost[version='>=1.1.1,<1.3.0',build='*cpu*']
diff --git a/build_artifacts/v1/v1.12/v1.12.2/cpu.pinned_env.in b/build_artifacts/v1/v1.12/v1.12.2/cpu.pinned_env.in
@@ -0,0 +1,3 @@
+conda-forge::libmamba[version='>=1.5.11,<1.6.0']
+conda-forge::evaluate[version='<0.4.2']
+conda-forge::catboost[version='>=1.1.1,<1.3.0',build='*cpu*']
diff --git a/build_artifacts/v1/v1.12/v1.12.2/gpu.env.in b/build_artifacts/v1/v1.12/v1.12.2/gpu.env.in
@@ -52,6 +52,3 @@ conda-forge::sasl[version='>=0.3.1,<0.4.0']
 conda-forge::thrift_sasl[version='>=0.4.3,<0.5.0']
 conda-forge::pyhive[version='>=0.7.0,<0.8.0']
 conda-forge::python-gssapi[version='>=1.9.0,<1.10.0']
-conda-forge::pyarrow-hotfix[version='>=0.6,<0.7.0']
-conda-forge::libmamba[version='<2.0.0']
-conda-forge::evaluate[version='<0.4.2']
diff --git a/build_artifacts/v1/v1.12/v1.12.2/gpu.pinned_env.in b/build_artifacts/v1/v1.12/v1.12.2/gpu.pinned_env.in
@@ -0,0 +1,3 @@
+conda-forge::libmamba[version='>=1.5.11,<1.6.0']
+conda-forge::evaluate[version='<0.4.2']
+conda-forge::pyarrow-hotfix[version='>=0.6,<0.7.0']
diff --git a/build_artifacts/v2/v2.1/v2.1.2/Dockerfile b/build_artifacts/v2/v2.1/v2.1.2/Dockerfile
@@ -3,6 +3,7 @@ FROM mambaorg/micromamba:$TAG_FOR_BASE_MICROMAMBA_IMAGE
 
 ARG CUDA_MAJOR_MINOR_VERSION=''
 ARG ENV_IN_FILENAME
+ARG PINNED_ENV_IN_FILENAME
 ARG ARG_BASED_ENV_IN_FILENAME
 ARG IMAGE_VERSION
 LABEL "org.amazon.sagemaker-distribution.image.version"=$IMAGE_VERSION
@@ -68,17 +69,18 @@ RUN rsync -a ${DIRECTORY_TREE_STAGE_DIR}/ / && \
 
 USER $MAMBA_USER
 COPY --chown=$MAMBA_USER:$MAMBA_USER $ENV_IN_FILENAME *.in /tmp/
+COPY --chown=$MAMBA_USER:$MAMBA_USER $PINNED_ENV_IN_FILENAME *.in /tmp/
 ARG MAMBA_DOCKERFILE_ACTIVATE=1
 ARG CONDA_OVERRIDE_CUDA=$CUDA_MAJOR_MINOR_VERSION
 
-# Make sure that $ENV_IN_FILENAME has a newline at the end before the `tee` command runs. Otherwise, nasty things
-# will happen.
+# Make sure that $ENV_IN_FILENAME and $PINNED_ENV_IN_FILENAME has a newline at the end before the `tee` command runs.
+# Otherwise, nasty things will happen.
 RUN if [[ -z $ARG_BASED_ENV_IN_FILENAME ]] ; \
     then echo 'No ARG_BASED_ENV_IN_FILENAME passed' ; \
     else envsubst < /tmp/$ARG_BASED_ENV_IN_FILENAME | tee --append /tmp/$ENV_IN_FILENAME ; \
     fi && \
     # Enforce dependencies are all installed from conda-forge
-    micromamba install -y --name base --file /tmp/$ENV_IN_FILENAME && \
+    micromamba install -y --name base --file /tmp/$ENV_IN_FILENAME --file /tmp/$PINNED_ENV_IN_FILENAME && \
     micromamba clean --all --yes --force-pkgs-dirs && \
     rm -rf /tmp/*.in && \
     sudo ln -s $(which python3) /usr/bin/python && \
diff --git a/build_artifacts/v2/v2.1/v2.1.2/cpu.env.in b/build_artifacts/v2/v2.1/v2.1.2/cpu.env.in
@@ -34,7 +34,6 @@ conda-forge::boto3[version='>=1.34.162,<1.35.0']
 conda-forge::sagemaker-python-sdk[version='>=2.227.0,<2.228.0']
 conda-forge::supervisor[version='>=4.2.5,<4.3.0']
 conda-forge::autogluon[version='>=1.1.1,<1.2.0']
-conda-forge::catboost[version='>=1.1.1,<1.3.0',build='*cpu*']
 conda-forge::aws-glue-sessions[version='>=1.0.8,<1.1.0']
 conda-forge::sagemaker-kernel-wrapper[version='>=0.0.4,<0.1.0']
 conda-forge::jupyter-ai[version='>=2.25.0,<2.26.0']
@@ -55,7 +54,3 @@ conda-forge::pyhive[version='>=0.7.0,<0.8.0']
 conda-forge::python-gssapi[version='>=1.9.0,<1.10.0']
 conda-forge::tf-keras[version='>=2.17.0,<2.18.0']
 conda-forge::git-remote-codecommit[version='>=1.16,<1.17.0']
-conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
-conda-forge::evaluate[version='<=0.4.1']
-conda-forge::libmamba[version='<2.0.0']
-conda-forge::dash[version='2.18.1']
diff --git a/build_artifacts/v2/v2.1/v2.1.2/cpu.pinned_env.in b/build_artifacts/v2/v2.1/v2.1.2/cpu.pinned_env.in
@@ -0,0 +1,5 @@
+conda-forge::libmamba[version='>=1.5.11,<1.6.0']
+conda-forge::dash[version='<=2.18.1']
+conda-forge::evaluate[version='<0.4.2']
+conda-forge::catboost[version='>=1.1.1,<1.3.0',build='*cpu*']
+conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
diff --git a/build_artifacts/v2/v2.1/v2.1.2/gpu.env.in b/build_artifacts/v2/v2.1/v2.1.2/gpu.env.in
@@ -54,7 +54,3 @@ conda-forge::pyhive[version='>=0.7.0,<0.8.0']
 conda-forge::python-gssapi[version='>=1.9.0,<1.10.0']
 conda-forge::tf-keras[version='>=2.17.0,<2.18.0']
 conda-forge::git-remote-codecommit[version='>=1.16,<1.17.0']
-conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
-conda-forge::evaluate[version='<=0.4.1']
-conda-forge::libmamba[version='<2.0.0']
-conda-forge::dash[version='2.18.1']
diff --git a/build_artifacts/v2/v2.1/v2.1.2/gpu.pinned_env.in b/build_artifacts/v2/v2.1/v2.1.2/gpu.pinned_env.in
@@ -0,0 +1,4 @@
+conda-forge::libmamba[version='>=1.5.11,<1.6.0']
+conda-forge::dash[version='<=2.18.1']
+conda-forge::evaluate[version='<0.4.2']
+conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
diff --git a/build_artifacts/v2/v2.2/v2.2.3/Dockerfile b/build_artifacts/v2/v2.2/v2.2.3/Dockerfile
@@ -3,6 +3,7 @@ FROM mambaorg/micromamba:$TAG_FOR_BASE_MICROMAMBA_IMAGE
 
 ARG CUDA_MAJOR_MINOR_VERSION=''
 ARG ENV_IN_FILENAME
+ARG PINNED_ENV_IN_FILENAME
 ARG ARG_BASED_ENV_IN_FILENAME
 ARG IMAGE_VERSION
 LABEL "org.amazon.sagemaker-distribution.image.version"=$IMAGE_VERSION
@@ -68,17 +69,18 @@ RUN rsync -a ${DIRECTORY_TREE_STAGE_DIR}/ / && \
 
 USER $MAMBA_USER
 COPY --chown=$MAMBA_USER:$MAMBA_USER $ENV_IN_FILENAME *.in /tmp/
+COPY --chown=$MAMBA_USER:$MAMBA_USER $PINNED_ENV_IN_FILENAME *.in /tmp/
 ARG MAMBA_DOCKERFILE_ACTIVATE=1
 ARG CONDA_OVERRIDE_CUDA=$CUDA_MAJOR_MINOR_VERSION
 
-# Make sure that $ENV_IN_FILENAME has a newline at the end before the `tee` command runs. Otherwise, nasty things
-# will happen.
+# Make sure that $ENV_IN_FILENAME and $PINNED_ENV_IN_FILENAME has a newline at the end before the `tee` command runs.
+# Otherwise, nasty things will happen.
 RUN if [[ -z $ARG_BASED_ENV_IN_FILENAME ]] ; \
     then echo 'No ARG_BASED_ENV_IN_FILENAME passed' ; \
     else envsubst < /tmp/$ARG_BASED_ENV_IN_FILENAME | tee --append /tmp/$ENV_IN_FILENAME ; \
     fi && \
     # Enforce dependencies are all installed from conda-forge
-    micromamba install -y --name base --file /tmp/$ENV_IN_FILENAME && \
+    micromamba install -y --name base --file /tmp/$ENV_IN_FILENAME --file /tmp/$PINNED_ENV_IN_FILENAME && \
     micromamba clean --all --yes --force-pkgs-dirs && \
     rm -rf /tmp/*.in && \
     sudo ln -s $(which python3) /usr/bin/python && \
diff --git a/build_artifacts/v2/v2.2/v2.2.3/cpu.env.in b/build_artifacts/v2/v2.2/v2.2.3/cpu.env.in
@@ -34,7 +34,6 @@ conda-forge::boto3[version='>=1.34.162,<1.35.0']
 conda-forge::sagemaker-python-sdk[version='>=2.227.0,<2.228.0']
 conda-forge::supervisor[version='>=4.2.5,<4.3.0']
 conda-forge::autogluon[version='>=1.1.1,<1.2.0']
-conda-forge::catboost[version='>=1.1.1,<1.3.0',build='*cpu*']
 conda-forge::aws-glue-sessions[version='>=1.0.8,<1.1.0']
 conda-forge::sagemaker-kernel-wrapper[version='>=0.0.4,<0.1.0']
 conda-forge::jupyter-ai[version='>=2.28.5,<2.29.0']
@@ -55,8 +54,4 @@ conda-forge::pyhive[version='>=0.7.0,<0.8.0']
 conda-forge::python-gssapi[version='>=1.9.0,<1.10.0']
 conda-forge::tf-keras[version='>=2.17.0,<2.18.0']
 conda-forge::git-remote-codecommit[version='>=1.16,<1.17.0']
-conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
 conda-forge::docker-cli[version='>=27.1.1,<27.2.0']
-conda-forge::libmamba[version='>=1.5.11,<1.6.0']
-conda-forge::dash[version='2.18.1']
-conda-forge::evaluate[version='<0.4.2']
diff --git a/build_artifacts/v2/v2.2/v2.2.3/cpu.pinned_env.in b/build_artifacts/v2/v2.2/v2.2.3/cpu.pinned_env.in
@@ -0,0 +1,5 @@
+conda-forge::libmamba[version='>=1.5.11,<1.6.0']
+conda-forge::dash[version='<=2.18.1']
+conda-forge::evaluate[version='<0.4.2']
+conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
+conda-forge::catboost[version='>=1.1.1,<1.3.0',build='*cpu*']
diff --git a/build_artifacts/v2/v2.2/v2.2.3/gpu.env.in b/build_artifacts/v2/v2.2/v2.2.3/gpu.env.in
@@ -54,8 +54,4 @@ conda-forge::pyhive[version='>=0.7.0,<0.8.0']
 conda-forge::python-gssapi[version='>=1.9.0,<1.10.0']
 conda-forge::tf-keras[version='>=2.17.0,<2.18.0']
 conda-forge::git-remote-codecommit[version='>=1.16,<1.17.0']
-conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
 conda-forge::docker-cli[version='>=27.1.1,<27.2.0']
-conda-forge::libmamba[version='>=1.5.11,<1.6.0']
-conda-forge::dash[version='2.18.1']
-conda-forge::evaluate[version='<0.4.2']
diff --git a/build_artifacts/v2/v2.2/v2.2.3/gpu.pinned_env.in b/build_artifacts/v2/v2.2/v2.2.3/gpu.pinned_env.in
@@ -0,0 +1,4 @@
+conda-forge::libmamba[version='>=1.5.11,<1.6.0']
+conda-forge::dash[version='<=2.18.1']
+conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
+conda-forge::evaluate[version='<0.4.2']
diff --git a/build_artifacts/v2/v2.3/v2.3.2/Dockerfile b/build_artifacts/v2/v2.3/v2.3.2/Dockerfile
@@ -3,6 +3,7 @@ FROM mambaorg/micromamba:$TAG_FOR_BASE_MICROMAMBA_IMAGE
 
 ARG CUDA_MAJOR_MINOR_VERSION=''
 ARG ENV_IN_FILENAME
+ARG PINNED_ENV_IN_FILENAME
 ARG ARG_BASED_ENV_IN_FILENAME
 ARG IMAGE_VERSION
 LABEL "org.amazon.sagemaker-distribution.image.version"=$IMAGE_VERSION
@@ -82,17 +83,18 @@ RUN rsync -a ${DIRECTORY_TREE_STAGE_DIR}/ / && \
 
 USER $MAMBA_USER
 COPY --chown=$MAMBA_USER:$MAMBA_USER $ENV_IN_FILENAME *.in /tmp/
+COPY --chown=$MAMBA_USER:$MAMBA_USER $PINNED_ENV_IN_FILENAME *.in /tmp/
 ARG MAMBA_DOCKERFILE_ACTIVATE=1
 ARG CONDA_OVERRIDE_CUDA=$CUDA_MAJOR_MINOR_VERSION
 
-# Make sure that $ENV_IN_FILENAME has a newline at the end before the `tee` command runs. Otherwise, nasty things
-# will happen.
+# Make sure that $ENV_IN_FILENAME and $PINNED_ENV_IN_FILENAME has a newline at the end before the `tee` command runs.
+# Otherwise, nasty things will happen.
 RUN if [[ -z $ARG_BASED_ENV_IN_FILENAME ]] ; \
     then echo 'No ARG_BASED_ENV_IN_FILENAME passed' ; \
     else envsubst < /tmp/$ARG_BASED_ENV_IN_FILENAME | tee --append /tmp/$ENV_IN_FILENAME ; \
     fi && \
     # Enforce dependencies are all installed from conda-forge
-    micromamba install -y --name base --file /tmp/$ENV_IN_FILENAME && \
+    micromamba install -y --name base --file /tmp/$ENV_IN_FILENAME --file /tmp/$PINNED_ENV_IN_FILENAME && \
     mkdir -p $SAGEMAKER_RECOVERY_MODE_HOME && \
     chown $MAMBA_USER:$MAMBA_USER $SAGEMAKER_RECOVERY_MODE_HOME && \
     SUPERVISOR_VERSION=$(micromamba list | grep 'supervisor ' | tr -s ' ' | cut -d ' ' -f 3 | head -n 1) && \
diff --git a/build_artifacts/v2/v2.3/v2.3.2/cpu.env.in b/build_artifacts/v2/v2.3/v2.3.2/cpu.env.in
@@ -56,9 +56,4 @@ conda-forge::pyhive[version='>=0.7.0,<0.8.0']
 conda-forge::python-gssapi[version='>=1.9.0,<1.10.0']
 conda-forge::tf-keras[version='>=2.17.0,<2.18.0']
 conda-forge::git-remote-codecommit[version='>=1.16,<1.17.0']
-conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
 conda-forge::docker-cli[version='>=27.5.1,<27.6.0']
-conda-forge::libmamba[version='>=1.5.12,<1.6.0']
-conda-forge::dash[version='2.18.1']
-conda-forge::evaluate[version='<0.4.2']
-conda-forge::catboost[version='>=1.2.7,<1.3.0',build='*cpu*']
diff --git a/build_artifacts/v2/v2.3/v2.3.2/cpu.pinned_env.in b/build_artifacts/v2/v2.3/v2.3.2/cpu.pinned_env.in
@@ -0,0 +1,5 @@
+conda-forge::libmamba[version='>=1.5.11,<1.6.0']
+conda-forge::dash[version='<=2.18.1']
+conda-forge::evaluate[version='<0.4.2']
+conda-forge::catboost[version='>=1.1.1,<1.3.0',build='*cpu*']
+conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
diff --git a/build_artifacts/v2/v2.3/v2.3.2/gpu.env.in b/build_artifacts/v2/v2.3/v2.3.2/gpu.env.in
@@ -56,8 +56,4 @@ conda-forge::pyhive[version='>=0.7.0,<0.8.0']
 conda-forge::python-gssapi[version='>=1.9.0,<1.10.0']
 conda-forge::tf-keras[version='>=2.17.0,<2.18.0']
 conda-forge::git-remote-codecommit[version='>=1.16,<1.17.0']
-conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
 conda-forge::docker-cli[version='>=27.5.1,<27.6.0']
-conda-forge::libmamba[version='>=1.5.12,<1.6.0']
-conda-forge::dash[version='2.18.1']
-conda-forge::evaluate[version='<0.4.2']
diff --git a/build_artifacts/v2/v2.3/v2.3.2/gpu.pinned_env.in b/build_artifacts/v2/v2.3/v2.3.2/gpu.pinned_env.in
@@ -0,0 +1,4 @@
+conda-forge::libmamba[version='>=1.5.11,<1.6.0']
+conda-forge::dash[version='<=2.18.1']
+conda-forge::evaluate[version='<0.4.2']
+conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
diff --git a/build_artifacts/v2/v2.4/v2.4.0/Dockerfile b/build_artifacts/v2/v2.4/v2.4.0/Dockerfile
@@ -3,6 +3,7 @@ FROM mambaorg/micromamba:$TAG_FOR_BASE_MICROMAMBA_IMAGE
 
 ARG CUDA_MAJOR_MINOR_VERSION=''
 ARG ENV_IN_FILENAME
+ARG PINNED_ENV_IN_FILENAME
 ARG ARG_BASED_ENV_IN_FILENAME
 ARG IMAGE_VERSION
 LABEL "org.amazon.sagemaker-distribution.image.version"=$IMAGE_VERSION
@@ -82,17 +83,18 @@ RUN rsync -a ${DIRECTORY_TREE_STAGE_DIR}/ / && \
 
 USER $MAMBA_USER
 COPY --chown=$MAMBA_USER:$MAMBA_USER $ENV_IN_FILENAME *.in /tmp/
+COPY --chown=$MAMBA_USER:$MAMBA_USER $PINNED_ENV_IN_FILENAME *.in /tmp/
 ARG MAMBA_DOCKERFILE_ACTIVATE=1
 ARG CONDA_OVERRIDE_CUDA=$CUDA_MAJOR_MINOR_VERSION
 
-# Make sure that $ENV_IN_FILENAME has a newline at the end before the `tee` command runs. Otherwise, nasty things
-# will happen.
+# Make sure that $ENV_IN_FILENAME and $PINNED_ENV_IN_FILENAME has a newline at the end before the `tee` command runs.
+# Otherwise, nasty things will happen.
 RUN if [[ -z $ARG_BASED_ENV_IN_FILENAME ]] ; \
     then echo 'No ARG_BASED_ENV_IN_FILENAME passed' ; \
     else envsubst < /tmp/$ARG_BASED_ENV_IN_FILENAME | tee --append /tmp/$ENV_IN_FILENAME ; \
     fi && \
     # Enforce dependencies are all installed from conda-forge
-    micromamba install -y --name base --file /tmp/$ENV_IN_FILENAME && \
+    micromamba install -y --name base --file /tmp/$ENV_IN_FILENAME --file /tmp/$PINNED_ENV_IN_FILENAME && \
     mkdir -p $SAGEMAKER_RECOVERY_MODE_HOME && \
     chown $MAMBA_USER:$MAMBA_USER $SAGEMAKER_RECOVERY_MODE_HOME && \
     SUPERVISOR_VERSION=$(grep "^conda-forge::supervisor\[" /tmp/$ENV_IN_FILENAME) && \
diff --git a/build_artifacts/v2/v2.4/v2.4.0/cpu.env.in b/build_artifacts/v2/v2.4/v2.4.0/cpu.env.in
@@ -56,9 +56,4 @@ conda-forge::pyhive[version='>=0.7.0,<1.0.0']
 conda-forge::python-gssapi[version='>=1.9.0,<2.0.0']
 conda-forge::tf-keras[version='>=2.17.0,<3.0.0']
 conda-forge::git-remote-codecommit[version='>=1.16,<2.0.0']
-conda-forge::sentencepiece[version='0.1.99']
 conda-forge::docker-cli[version='>=27.5.1,<28.0.0']
-conda-forge::libmamba[version='>=1.5.12,<2.0.0']
-conda-forge::dash[version='2.18.1']
-conda-forge::evaluate[version='0.4.1']
-conda-forge::catboost[version='>=1.2.7,<2.0.0',build="*cpu*"]
diff --git a/build_artifacts/v2/v2.4/v2.4.0/cpu.pinned_env.in b/build_artifacts/v2/v2.4/v2.4.0/cpu.pinned_env.in
@@ -0,0 +1,5 @@
+conda-forge::libmamba[version='>=1.5.11,<1.6.0']
+conda-forge::dash[version='<=2.18.1']
+conda-forge::evaluate[version='<0.4.2']
+conda-forge::catboost[version='>=1.1.1,<1.3.0',build='*cpu*']
+conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
diff --git a/build_artifacts/v2/v2.4/v2.4.0/gpu.env.in b/build_artifacts/v2/v2.4/v2.4.0/gpu.env.in
@@ -56,8 +56,4 @@ conda-forge::pyhive[version='>=0.7.0,<1.0.0']
 conda-forge::python-gssapi[version='>=1.9.0,<2.0.0']
 conda-forge::tf-keras[version='>=2.17.0,<3.0.0']
 conda-forge::git-remote-codecommit[version='>=1.16,<2.0.0']
-conda-forge::sentencepiece[version='0.1.99']
 conda-forge::docker-cli[version='>=27.5.1,<28.0.0']
-conda-forge::libmamba[version='>=1.5.12,<2.0.0']
-conda-forge::dash[version='2.18.1']
-conda-forge::evaluate[version='0.4.1']
diff --git a/build_artifacts/v2/v2.4/v2.4.0/gpu.pinned_env.in b/build_artifacts/v2/v2.4/v2.4.0/gpu.pinned_env.in
@@ -0,0 +1,4 @@
+conda-forge::libmamba[version='>=1.5.11,<1.6.0']
+conda-forge::dash[version='<=2.18.1']
+conda-forge::evaluate[version='<0.4.2']
+conda-forge::sentencepiece[version='>=0.1.99,<0.2.0']
diff --git a/src/config.py b/src/config.py
@@ -31,6 +31,7 @@
                 "TAG_FOR_BASE_MICROMAMBA_IMAGE": "jammy-cuda-11.8.0",
                 "CUDA_MAJOR_MINOR_VERSION": "11.8",  # Should match the previous one.
                 "ENV_IN_FILENAME": "gpu.env.in",
+                "PINNED_ENV_IN_FILENAME": "gpu.pinned_env.in",
                 "ARG_BASED_ENV_IN_FILENAME": "gpu.arg_based_env.in",
             },
             "additional_packages_env_in_file": "gpu.additional_packages_env.in",
@@ -43,6 +44,7 @@
             "build_args": {
                 "TAG_FOR_BASE_MICROMAMBA_IMAGE": "jammy",
                 "ENV_IN_FILENAME": "cpu.env.in",
+                "PINNED_ENV_IN_FILENAME": "cpu.pinned_env.in",
             },
             "additional_packages_env_in_file": "cpu.additional_packages_env.in",
             "image_tag_generator": "{image_version}-cpu",
@@ -57,6 +59,7 @@
                 "TAG_FOR_BASE_MICROMAMBA_IMAGE": "jammy-cuda-12.5.0",
                 "CUDA_MAJOR_MINOR_VERSION": "12.5",  # Should match the previous one.
                 "ENV_IN_FILENAME": "gpu.env.in",
+                "PINNED_ENV_IN_FILENAME": "gpu.pinned_env.in",
                 "ARG_BASED_ENV_IN_FILENAME": "gpu.arg_based_env.in",
             },
             "additional_packages_env_in_file": "gpu.additional_packages_env.in",
@@ -69,6 +72,7 @@
             "build_args": {
                 "TAG_FOR_BASE_MICROMAMBA_IMAGE": "jammy",
                 "ENV_IN_FILENAME": "cpu.env.in",
+                "PINNED_ENV_IN_FILENAME": "cpu.pinned_env.in",
             },
             "additional_packages_env_in_file": "cpu.additional_packages_env.in",
             "image_tag_generator": "{image_version}-cpu",
@@ -83,6 +87,7 @@
                 "TAG_FOR_BASE_MICROMAMBA_IMAGE": "jammy-cuda-12.5.0",
                 "CUDA_MAJOR_MINOR_VERSION": "12.5",  # Should match the previous one.
                 "ENV_IN_FILENAME": "gpu.env.in",
+                "PINNED_ENV_IN_FILENAME": "gpu.pinned_env.in",
                 "ARG_BASED_ENV_IN_FILENAME": "gpu.arg_based_env.in",
             },
             "additional_packages_env_in_file": "gpu.additional_packages_env.in",
@@ -95,6 +100,7 @@
             "build_args": {
                 "TAG_FOR_BASE_MICROMAMBA_IMAGE": "jammy",
                 "ENV_IN_FILENAME": "cpu.env.in",
+                "PINNED_ENV_IN_FILENAME": "cpu.pinned_env.in",
             },
             "additional_packages_env_in_file": "cpu.additional_packages_env.in",
             "image_tag_generator": "{image_version}-cpu",
diff --git a/src/main.py b/src/main.py
@@ -109,6 +109,10 @@ def _create_new_version_artifacts(args):
 def _copy_static_files(base_version_dir, new_version_dir, new_version_major, runtime_version_upgrade_type):
     for f in glob.glob(f"{base_version_dir}/gpu.arg_based_env.in"):
         shutil.copy2(f, new_version_dir)
+    for f in glob.glob(f"{base_version_dir}/cpu.pinned_env.in"):
+        shutil.copy2(f, new_version_dir)
+    for f in glob.glob(f"{base_version_dir}/gpu.pinned_env.in"):
+        shutil.copy2(f, new_version_dir)
     for f in glob.glob(f"{base_version_dir}/patch_*"):
         shutil.copy2(f, new_version_dir)
 
diff --git a/src/utils.py b/src/utils.py
@@ -21,7 +21,7 @@ def get_dir_for_version(version: Version) -> str:
 # Clean versioning strings
 def post_handle_container_log(container_log_content):
     # Work with bytes directly
-    return container_log_content.replace(b'%21', b'!')
+    return container_log_content.replace(b"%21", b"!")
 
 
 def is_exists_dir_for_version(version: Version, file_name_to_verify_existence="Dockerfile") -> bool:
diff --git a/template/v1/Dockerfile b/template/v1/Dockerfile
diff --git a/template/v2/Dockerfile b/template/v2/Dockerfile
diff --git a/template/v3/Dockerfile b/template/v3/Dockerfile

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+conda-forge::libmamba[version='>=1.5.11,<1.6.0']`
	`2`	`+conda-forge::evaluate[version='<0.4.2']`
	`3`	`+conda-forge::catboost[version='>=1.1.1,<1.3.0',build='cpu']`