add Dependency.treeish
checkout treeish before copy
bump version