This is absolutely the only right way to do this. It's very unsettling that locking to a specific revision isn't considered the default. Depending on git maste

This is absolutely the only right way to do this. It's very unsettling that locking to a specific revision isn't considered the default. Depending on git master is cowboy coding at its most cavalier; build systems should prize repeatability above all else.