Use the release sha (if available) when installing