Feature request: OS package version pinning #39
Description
Sometimes you need to pin the version of an OS package in your docker base image, for example because a newer version introduces a breaking change that you don't want or (or cannot) deal with yet. Currently the docker lock file mechanism doesn't offer a good way to pin a version. Every time that the plugin generates a fresh lock file, you have to edit it manually afterwards to fix the version of the pinned dependency.
It would be ideal if you could specify either a specific version (e.g. 1.2.3-rel4) or a "less than" version (e.g. <2.0.0) somewhere in the dockerBaseImage task.
cc @alpar-t