Currently the tool always uses the latest toolchain by default but in reality this creates incompatibility for older pinned library versions. Instead we should lock the toolchain in tandem with the vendored library as well.