fetch git deps via HTTPS