t3903: stop hard-coding commit sha1s