use private snapshots of patched deps