change dependency to use github hash