Refer to packages by commit ID so we can rebuild when dependencies change