For external programs that we don't control, it's generally better to use a fixed version; either use a release or use a specific tag / hash for GIT. This ensures things won't break for us from one day to the other.