debian's apt is a joke. Who thought it was a good idea to not be able to pin dependencies?! it's 2023, not 2003