Rust

I've been pinning my projects with the code in https://github.com/rust-lang/miri/pull/3032

In particular, the important part is:

# Pin a version of serde without intransparent unreproducible binary blobs.
serde = { version = "1.0, <1.0.172", features = ["derive"] }

Which both avoids the conflicts an =version pin would produce and ensures all your dependencies with ranged serde versions will use a version without the binary if possible ^.^