the goal was to pin exactly to a commit so we had determinism, but it's not total, leading to breakage as homebrew refactors/deprecates things