Forbid pinned dependencies and add a smoke test.

Closes #3560910

Merge request reports

Loading