this is how you fix a dependency against a git commit instead of a version