+1 on pegging externals to a tag or SHA.  This will allow all versions of Heka to build with their proper configurations/components going forward.