Note that commit hashes are valid versions

Closes #870