libraries: add commit hashes to git clones