Pinning all possible packages to minor versions

Pinning packages to minor versions is as ~1.0.0

The file_entity module is one case where we cannot pin to a tag because there isn't a tag of the latest code on d.o so we're pinning to a fixed reference until one is created.

In cases where we have forked a d.o module and have had to create our own tags we've used the d.o module's major version only as a starting point for our tag. We have to use semver tags instead of d.o style tags so 8.x-2.1-alpha2 becomes ~2.0.0