* pin path_provider_android * remove constraint that only explicit dependencies can be pinned * roll packages