Pin git requirements to avoid surprises