Using specific version in requirements.psd1 for managed dependencies can still cause auto version updates

Using specific version in requirements.psd1 for managed dependencies can still cause auto version updates. This is particularly true for Az module. Az module has a dependency on Az.Accounts that is specified as >=2.2.6. (https://www.powershellgallery.com/packages/Az/5.6.0) This would cause updates to Az.Accounts to be downloaded automatically. This can break customers function app.

@{
'Az' = '5.6.0'
'Az.Accounts' = '2.2.6'
'Az.Resources' = '3.3.0'
}