You just pin the sub-dependency. This is builtin functionality for all the python environment managers.