Clamp older BinDeps releases to require older SHA implementations