Hacker News Reader

by doing this, do you suggest also tying your dependencies versions to those packages with the distro version you're running?

Yes, or just shadow them with newer versions and run your own repo.