pin local dependencies when auto-bumping

[pngwn]

related to #5061.

[gradio-pr-bot]

🪼 branch checks and previews

•	Name	Status	URL
	Spaces	ready!	Spaces preview
	Website	ready!	Website preview
🦄	Changes	detected!	Details

---

Install Gradio from this PR

pip install https://gradio-builds.s3.amazonaws.com/34f87814e7f801b8a49959bc702f84d5b03c57db/gradio-3.40.1-py3-none-any.whl

Install Gradio Python Client from this PR

pip install "gradio-client @ git+https://github.com/gradio-app/gradio@34f87814e7f801b8a49959bc702f84d5b03c57db#subdirectory=client/python"

[gradio-pr-bot]

🦄 no changes detected

This Pull Request does not include changes to any packages.

__No changes detected. __

• Maintainers can select this checkbox to manually select packages to update.

Something isn't right?

• Maintainers can change the version label to modify the version bump.
• If the bot has failed to detect any changes, or if this pull request needs to update multiple packages to different versions or requires a more comprehensive changelog entry, maintainers can create the changelog file directly.

[abidlabs]

Sweet!

[freddyaboulton]

Thank you @pngwn !