I'm looking through https://www.pulumi.com/docs/get-started/install/versions/ and it seems pretty regular that there's hotfix/security versions being release. You said that you CAN pin to minor versions, that would imply (to me) that it's the "Latest hotfix version for that minor version" that it will pull in. however, it seems that I have to supply the hotfix version to install, which would mean that I'm pinning to the hotfix version, not the minor version. Maybe I'm misunderstanding something?