[gnome-build-meta/abderrahim/commit-refs: 3/3] Add refs to elements




commit 0a84e9bffa34047d1389ba0c77e11ca8f99856ab
Author: Abderrahim Kitouni <abderrahim kitouni codethink co uk>
Date:   Tue Oct 4 14:24:33 2022 +0200

    Add refs to elements
    
    This also moves from project.refs to inline ref storage to be more in line
    with what is done on stable branches
    
    Part-of: <https://gitlab.gnome.org/GNOME/gnome-build-meta/-/merge_requests/1795>

 elements/boards/common/arm-none-eabi-binutils.bst  |   1 +
 elements/boards/common/arm-none-eabi-gcc.bst       |   4 +
 .../boards/pinebook-pro/arm-trusted-firmware.bst   |   1 +
 elements/boards/pinebook-pro/u-boot.bst            |   1 +
 elements/boards/pinephone/arm-trusted-firmware.bst |   1 +
 elements/boards/pinephone/linux.bst                |   1 +
 elements/boards/pinephone/u-boot.bst               |   3 +-
 elements/boards/raspberrypi-4/bsp/firmware.bst     |   1 +
 elements/boards/raspberrypi-4/bsp/linux.bst        |   1 +
 elements/boards/raspberrypi-4/bsp/rpi-userland.bst |   1 +
 elements/boards/raspberrypi-4/bsp/u-boot.bst       |   3 +-
 elements/boards/rock64/arm-trusted-firmware.bst    |   1 +
 elements/boards/rock64/u-boot.bst                  |   1 +
 elements/core-deps/AppStream.bst                   |   1 +
 elements/core-deps/LibRaw.bst                      |   1 +
 elements/core-deps/LibVNCServer.bst                |   1 +
 elements/core-deps/ModemManager.bst                |   1 +
 elements/core-deps/NetworkManager.bst              |   1 +
 elements/core-deps/accountsservice.bst             |   1 +
 elements/core-deps/atkmm-1.6.bst                   |   1 +
 elements/core-deps/babl.bst                        |   1 +
 elements/core-deps/boost.bst                       |   1 +
 elements/core-deps/cairomm-1.0.bst                 |   1 +
 elements/core-deps/callaudiod.bst                  |   1 +
 elements/core-deps/clutter-gst.bst                 |   1 +
 elements/core-deps/clutter-gtk.bst                 |   1 +
 elements/core-deps/clutter.bst                     |   1 +
 elements/core-deps/cmark.bst                       |   1 +
 elements/core-deps/cogl.bst                        |   1 +
 elements/core-deps/colord-gtk.bst                  |   1 +
 elements/core-deps/colord.bst                      |   1 +
 elements/core-deps/cups-pk-helper.bst              |   1 +
 elements/core-deps/dconf.bst                       |   1 +
 elements/core-deps/dnsmasq.bst                     |   1 +
 elements/core-deps/dotconf.bst                     |   1 +
 elements/core-deps/ebtables.bst                    |   1 +
 elements/core-deps/editorconfig-core-c.bst         |   1 +
 elements/core-deps/eos-updater.bst                 |   1 +
 elements/core-deps/espeak-ng.bst                   |   1 +
 elements/core-deps/evolution-data-server.bst       |   1 +
 elements/core-deps/exempi.bst                      |   1 +
 elements/core-deps/exiv2.bst                       |   1 +
 elements/core-deps/feedbackd.bst                   |   1 +
 elements/core-deps/flatpak-builder.bst             |   1 +
 elements/core-deps/flatpak.bst                     |   1 +
 elements/core-deps/folks.bst                       |   1 +
 elements/core-deps/freerdp.bst                     |   1 +
 elements/core-deps/fwupd-efi.bst                   |   1 +
 elements/core-deps/fwupd.bst                       |   1 +
 elements/core-deps/gegl.bst                        |   1 +
 elements/core-deps/geocode-glib.bst                |   1 +
 elements/core-deps/gexiv2.bst                      |   1 +
 elements/core-deps/glib-testing.bst                |   1 +
 elements/core-deps/glibmm-2.4.bst                  |   1 +
 elements/core-deps/gmime.bst                       |   1 +
 elements/core-deps/gnome-autoar.bst                |   1 +
 elements/core-deps/gnome-online-accounts.bst       |   1 +
 elements/core-deps/gnome-video-effects.bst         |   1 +
 elements/core-deps/gom.bst                         |   1 +
 elements/core-deps/graphviz.bst                    |   1 +
 elements/core-deps/grilo-plugins.bst               |   1 +
 elements/core-deps/grilo.bst                       |   1 +
 elements/core-deps/gsound.bst                      |   1 +
 elements/core-deps/gspell.bst                      |   1 +
 elements/core-deps/gssdp.bst                       |   1 +
 elements/core-deps/gst-editing-services.bst        |   1 +
 elements/core-deps/gtk-vnc.bst                     |   1 +
 elements/core-deps/gtkmm-3.bst                     |   1 +
 elements/core-deps/gupnp-av.bst                    |   1 +
 elements/core-deps/gupnp-dlna.bst                  |   1 +
 elements/core-deps/gupnp.bst                       |   1 +
 elements/core-deps/intltool.bst                    |   1 +
 elements/core-deps/jsonrpc-glib.bst                |   1 +
 elements/core-deps/libbluray.bst                   |   1 +
 elements/core-deps/libcacard.bst                   |   1 +
 elements/core-deps/libcanberra.bst                 |   1 +
 elements/core-deps/libcdio-paranoia.bst            |   1 +
 elements/core-deps/libcdio.bst                     |   1 +
 elements/core-deps/libcloudproviders.bst           |   1 +
 elements/core-deps/libcue.bst                      |   1 +
 elements/core-deps/libdazzle.bst                   |   1 +
 elements/core-deps/libdvdread.bst                  |   1 +
 elements/core-deps/libgdata.bst                    |   1 +
 elements/core-deps/libgit2-glib.bst                |   1 +
 elements/core-deps/libgit2.bst                     |   1 +
 elements/core-deps/libgnomekbd.bst                 |   1 +
 elements/core-deps/libgphoto2.bst                  |   1 +
 elements/core-deps/libgsf.bst                      |   1 +
 elements/core-deps/libgsystemservice.bst           |   1 +
 elements/core-deps/libgtop.bst                     |   1 +
 elements/core-deps/libgusb.bst                     |   1 +
 elements/core-deps/libgweather.bst                 |   1 +
 elements/core-deps/libgxps.bst                     |   1 +
 elements/core-deps/libimobiledevice.bst            |   1 +
 elements/core-deps/libinput.bst                    |   1 +
 elements/core-deps/libjcat.bst                     |   1 +
 elements/core-deps/libmbim.bst                     |   1 +
 elements/core-deps/libmediaart.bst                 |   1 +
 elements/core-deps/libmtp.bst                      |   1 +
 elements/core-deps/libnfs.bst                      |   1 +
 elements/core-deps/libnma.bst                      |   1 +
 elements/core-deps/liboauth.bst                    |   1 +
 elements/core-deps/libosinfo.bst                   |   1 +
 elements/core-deps/libostree.bst                   |   1 +
 elements/core-deps/libpanel.bst                    |   1 +
 elements/core-deps/libpcap.bst                     |   1 +
 elements/core-deps/libpeas.bst                     |   1 +
 elements/core-deps/libportal.bst                   |   1 +
 elements/core-deps/libqmi.bst                      |   1 +
 elements/core-deps/librest.bst                     |   1 +
 elements/core-deps/libshumate.bst                  |   1 +
 elements/core-deps/libsigcplusplus-2.0.bst         |   1 +
 elements/core-deps/libssh2.bst                     |   1 +
 elements/core-deps/libusbmuxd.bst                  |   1 +
 elements/core-deps/libvirt-glib.bst                |   1 +
 elements/core-deps/libvirt.bst                     |   1 +
 elements/core-deps/libxklavier.bst                 |   1 +
 elements/core-deps/lmdb.bst                        |   1 +
 elements/core-deps/malcontent.bst                  |   1 +
 elements/core-deps/mm-common.bst                   |   1 +
 .../core-deps/mobile-broadband-provider-info.bst   |   1 +
 elements/core-deps/mogwai.bst                      |   1 +
 elements/core-deps/mpc.bst                         |   1 +
 elements/core-deps/nv-codec-headers.bst            |   1 +
 elements/core-deps/openldap.bst                    |   1 +
 elements/core-deps/osinfo-db-tools.bst             |   1 +
 elements/core-deps/osinfo-db.bst                   |   1 +
 elements/core-deps/pangomm-1.4.bst                 |   1 +
 elements/core-deps/perl-parse-yapp.bst             |   1 +
 elements/core-deps/phodav.bst                      |   1 +
 elements/core-deps/plist.bst                       |   1 +
 elements/core-deps/plymouth.bst                    |   1 +
 elements/core-deps/power-profiles-daemon.bst       |   1 +
 elements/core-deps/ppp.bst                         |   1 +
 elements/core-deps/protobuf-c.bst                  |   1 +
 elements/core-deps/protobuf.bst                    |   1 +
 elements/core-deps/pyatspi.bst                     |   1 +
 elements/core-deps/pycups.bst                      |   1 +
 elements/core-deps/python-pyparsing.bst            |   1 +
 elements/core-deps/qemu.bst                        |   1 +
 elements/core-deps/rpcsvc-proto.bst                |   1 +
 elements/core-deps/samba.bst                       |   1 +
 elements/core-deps/sane-backends.bst               |   1 +
 elements/core-deps/slirp-helper.bst                | 260 +++++++
 elements/core-deps/sofia-sip.bst                   |   1 +
 elements/core-deps/speech-dispatcher.bst           |   1 +
 elements/core-deps/spice-gtk.bst                   |   1 +
 elements/core-deps/spice-protocol.bst              |   1 +
 elements/core-deps/spice.bst                       |   1 +
 elements/core-deps/startup-notification.bst        |   1 +
 elements/core-deps/system-config-printer.bst       |   1 +
 elements/core-deps/template-glib.bst               |   1 +
 elements/core-deps/totem-pl-parser.bst             |   1 +
 elements/core-deps/tracker-miners.bst              |   1 +
 elements/core-deps/udisks2.bst                     |   1 +
 elements/core-deps/uhttpmock.bst                   |   1 +
 elements/core-deps/upower.bst                      |   1 +
 elements/core-deps/usbredir.bst                    |   1 +
 elements/core-deps/virglrenderer.bst               |   1 +
 elements/core-deps/vte.bst                         |   1 +
 elements/core-deps/webp-pixbuf-loader.bst          |   1 +
 elements/core-deps/xdg-desktop-portal-gnome.bst    |   1 +
 elements/core-deps/xdg-desktop-portal-gtk.bst      |   1 +
 elements/core-deps/xdg-sound-theme.bst             |   1 +
 elements/core-deps/xmlb.bst                        |   1 +
 elements/core/baobab.bst                           |   1 +
 elements/core/calls.bst                            |   1 +
 elements/core/cheese.bst                           |   1 +
 elements/core/d-spy.bst                            |   1 +
 elements/core/dconf-editor.bst                     |   1 +
 elements/core/devhelp.bst                          |   1 +
 elements/core/eog.bst                              |   1 +
 elements/core/epiphany.bst                         |   1 +
 elements/core/evince.bst                           |   1 +
 elements/core/gdm.bst                              |   1 +
 elements/core/gnome-backgrounds.bst                |   1 +
 elements/core/gnome-bluetooth.bst                  |   1 +
 elements/core/gnome-boxes.bst                      |   1 +
 elements/core/gnome-builder.bst                    |   1 +
 elements/core/gnome-calculator.bst                 |   1 +
 elements/core/gnome-calendar.bst                   |   1 +
 elements/core/gnome-characters.bst                 |   1 +
 elements/core/gnome-clocks.bst                     |   1 +
 elements/core/gnome-color-manager.bst              |   1 +
 elements/core/gnome-connections.bst                |   1 +
 elements/core/gnome-console.bst                    |   1 +
 elements/core/gnome-contacts.bst                   |   1 +
 elements/core/gnome-control-center.bst             |   1 +
 elements/core/gnome-desktop.bst                    |   3 +-
 elements/core/gnome-disk-utility.bst               |   1 +
 elements/core/gnome-font-viewer.bst                |   1 +
 elements/core/gnome-initial-setup.bst              |   1 +
 elements/core/gnome-keyring.bst                    |   1 +
 elements/core/gnome-logs.bst                       |   1 +
 elements/core/gnome-maps.bst                       |   1 +
 elements/core/gnome-menus.bst                      |   1 +
 elements/core/gnome-music.bst                      |   1 +
 elements/core/gnome-photos.bst                     |   1 +
 elements/core/gnome-remote-desktop.bst             |   1 +
 elements/core/gnome-session.bst                    |   1 +
 elements/core/gnome-settings-daemon.bst            |   1 +
 elements/core/gnome-shell-extensions.bst           |   1 +
 elements/core/gnome-shell.bst                      |   1 +
 elements/core/gnome-software.bst                   |   1 +
 elements/core/gnome-system-monitor.bst             |   1 +
 elements/core/gnome-text-editor.bst                |   1 +
 elements/core/gnome-tour.bst                       | 275 +++++++
 elements/core/gnome-user-docs.bst                  |   1 +
 elements/core/gnome-user-share.bst                 |   1 +
 elements/core/gnome-weather.bst                    |   1 +
 elements/core/mutter.bst                           |   1 +
 elements/core/nautilus.bst                         |   1 +
 elements/core/orca.bst                             |   1 +
 elements/core/rygel.bst                            |   1 +
 elements/core/simple-scan.bst                      |   1 +
 elements/core/sushi.bst                            |   1 +
 elements/core/sysprof.inc                          |   1 +
 elements/core/totem.bst                            |   1 +
 elements/custom/atinout.bst                        |   1 +
 elements/custom/eg25-manager.bst                   |   1 +
 elements/custom/iw.bst                             |   1 +
 elements/custom/libgpiod.bst                       |   1 +
 elements/freedesktop-sdk.bst                       |   3 +-
 elements/iso/eos-installer.bst                     |   1 +
 elements/iso/isomd5sum.bst                         |   1 +
 elements/iso/libburn.bst                           |   1 +
 elements/iso/libisoburn.bst                        |   1 +
 elements/iso/libisofs.bst                          |   1 +
 elements/sdk-deps/bubblewrap.bst                   |   1 +
 elements/sdk-deps/gi-docgen.bst                    |   1 +
 elements/sdk-deps/gvfs.bst                         |   1 +
 elements/sdk-deps/ibus.bst                         |   1 +
 elements/sdk-deps/libsass.bst                      |   1 +
 elements/sdk-deps/python-smartypants.bst           |   1 +
 elements/sdk-deps/python-typogrify.bst             |   1 +
 elements/sdk-deps/sassc.bst                        |   1 +
 elements/sdk-deps/xdg-dbus-proxy.bst               |   1 +
 elements/sdk/adobe-source-code-pro-fonts.bst       |   1 +
 elements/sdk/adwaita-icon-theme.bst                |   1 +
 elements/sdk/appstream-glib.bst                    |   1 +
 elements/sdk/at-spi2-core.bst                      |   1 +
 elements/sdk/cantarell-fonts.bst                   |   1 +
 elements/sdk/enchant-2.bst                         |   1 +
 elements/sdk/fcitx5-gtk.bst                        |   1 +
 elements/sdk/gcab.bst                              |   1 +
 elements/sdk/gcr-3.bst                             |   1 +
 elements/sdk/gcr.bst                               |   1 +
 elements/sdk/gdk-pixbuf.bst                        |   1 +
 elements/sdk/geoclue.bst                           |   1 +
 elements/sdk/gjs.bst                               |   1 +
 elements/sdk/glib-networking.bst                   |   1 +
 elements/sdk/glib.bst                              |   1 +
 elements/sdk/gobject-introspection.bst             |   1 +
 elements/sdk/graphene.bst                          |   1 +
 elements/sdk/gsettings-desktop-schemas.bst         |   1 +
 elements/sdk/gssproxy.bst                          |   1 +
 elements/sdk/gtk+-3.bst                            |   1 +
 elements/sdk/gtk-doc.bst                           |   1 +
 elements/sdk/gtk.bst                               |   1 +
 elements/sdk/gtksourceview-4.bst                   |   1 +
 elements/sdk/gtksourceview.bst                     |   1 +
 elements/sdk/json-glib.bst                         |   1 +
 elements/sdk/krb5.bst                              |   1 +
 elements/sdk/libadwaita.bst                        |   1 +
 elements/sdk/libgee.bst                            |   1 +
 elements/sdk/libhandy.bst                          |   1 +
 elements/sdk/libmanette.bst                        |   1 +
 elements/sdk/libnotify.bst                         |   1 +
 elements/sdk/librsvg.bst                           | 809 +++++++++++++++++++++
 elements/sdk/libsecret.bst                         |   1 +
 elements/sdk/libsoup-2.4.bst                       |   1 +
 elements/sdk/libsoup.bst                           |   1 +
 elements/sdk/libwpe.bst                            |   1 +
 elements/sdk/mozjs.bst                             |   1 +
 elements/sdk/nuspell.bst                           |   1 +
 elements/sdk/pango.bst                             |   1 +
 elements/sdk/pinentry.bst                          |   1 +
 elements/sdk/pygobject.bst                         |   1 +
 elements/sdk/tracker.bst                           |   1 +
 elements/sdk/vala-tarball.bst                      |   1 +
 elements/sdk/vala.bst                              |   1 +
 elements/sdk/webkitgtk.inc                         |   1 +
 elements/sdk/woff2.bst                             |   1 +
 elements/sdk/wpebackend-fdo.bst                    |   1 +
 elements/sdk/yelp-tools.bst                        |   1 +
 elements/sdk/yelp-xsl.bst                          |   1 +
 elements/sdk/yelp.bst                              |   1 +
 elements/vm/NetworkManager-fortisslvpn.bst         |   1 +
 elements/vm/NetworkManager-openconnect.bst         |   1 +
 elements/vm/NetworkManager-openvpn.bst             |   1 +
 elements/vm/NetworkManager-vpnc.bst                |   1 +
 elements/vm/android-udev-rules.bst                 |   1 +
 elements/vm/anthy.bst                              |   1 +
 elements/vm/buildstream/arpy.bst                   |   1 +
 elements/vm/buildstream/breezy.bst                 |   1 +
 elements/vm/buildstream/bst-external.bst           |   1 +
 elements/vm/buildstream/buildstream.bst            |   1 +
 elements/vm/buildstream/click.bst                  |   1 +
 elements/vm/buildstream/grpcio.bst                 |   1 +
 elements/vm/buildstream/pluginbase.bst             |   1 +
 elements/vm/buildstream/psutil.bst                 |   1 +
 elements/vm/buildstream/pytest-runner.bst          |   1 +
 elements/vm/buildstream/python3-configobj.bst      |   1 +
 elements/vm/buildstream/python3-dulwich.bst        |   1 +
 elements/vm/buildstream/python3-fastimport.bst     |   1 +
 elements/vm/buildstream/python3-patiencediff.bst   |   1 +
 elements/vm/buildstream/ruamel-yaml-clib.bst       |   1 +
 elements/vm/buildstream/ruamel-yaml.bst            |   1 +
 elements/vm/buildstream/ujson.bst                  |   1 +
 elements/vm/deviced.bst                            |   1 +
 elements/vm/eos-repartition.bst                    |   1 +
 elements/vm/fish.bst                               |   1 +
 elements/vm/flathub-config.bst                     |   1 +
 elements/vm/git-lfs.bst                            |   1 +
 elements/vm/gnome-nightly-config.bst               |   1 +
 elements/vm/ibus-anthy.bst                         |   1 +
 elements/vm/ibus-hangul.bst                        |   1 +
 elements/vm/ibus-libpinyin.bst                     |   1 +
 elements/vm/kyotocabinet.bst                       |   1 +
 elements/vm/libhangul.bst                          |   1 +
 elements/vm/libpinyin.bst                          |   2 +
 elements/vm/lxc.bst                                |  13 +-
 elements/vm/nss-mdns.bst                           |   1 +
 elements/vm/ntfs-3g.bst                            |   1 +
 elements/vm/openconnect.bst                        |   3 +-
 elements/vm/openfortivpn.bst                       |   1 +
 elements/vm/opensc.bst                             |   1 +
 elements/vm/openvpn.bst                            |   1 +
 elements/vm/spice-vdagent.bst                      |   1 +
 elements/vm/toolbox.bst                            |  28 +
 elements/vm/uresourced.bst                         |   1 +
 elements/vm/vpnc-scripts.bst                       |   1 +
 elements/vm/vpnc.bst                               |   1 +
 project.conf                                       |   3 -
 334 files changed, 1716 insertions(+), 14 deletions(-)
---
diff --git a/elements/boards/common/arm-none-eabi-binutils.bst 
b/elements/boards/common/arm-none-eabi-binutils.bst
index 1b436c193..b0368ae7f 100644
--- a/elements/boards/common/arm-none-eabi-binutils.bst
+++ b/elements/boards/common/arm-none-eabi-binutils.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:binutils/binutils-2.32.tar.xz
+  ref: 0ab6c55dd86a92ed561972ba15b9b70a8b9f75557f896446c82e8b36e473ee04
 
 depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
diff --git a/elements/boards/common/arm-none-eabi-gcc.bst b/elements/boards/common/arm-none-eabi-gcc.bst
index 70f7d2987..3ede6d7d9 100644
--- a/elements/boards/common/arm-none-eabi-gcc.bst
+++ b/elements/boards/common/arm-none-eabi-gcc.bst
@@ -3,15 +3,19 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:gcc/gcc-9.2.0/gcc-9.2.0.tar.xz
+  ref: ea6ef08f121239da5695f76c9b33637a118dcf63e24164422231917fa61fb206
 - kind: tar
   url: ftp_gnu_org:gmp/gmp-6.1.2.tar.xz
   directory: gmp
+  ref: 87b565e89a9a684fe4ebeeddb8399dce2599f9c9049854ca8c0dfbdea0e21912
 - kind: tar
   url: ftp_gnu_org:mpfr/mpfr-4.0.2.tar.xz
   directory: mpfr
+  ref: 1d3be708604eae0e42d578ba93b390c2a145f17743a744d8f3f8c2ad5855a38a
 - kind: tar
   url: ftp_gnu_org:mpc/mpc-1.1.0.tar.gz
   directory: mpc
+  ref: 6985c538143c1208dcb1ac42cedad6ff52e267b47e5f970183a3e75125b43c2e
 
 build-depends:
 - freedesktop-sdk.bst:components/tar.bst
diff --git a/elements/boards/pinebook-pro/arm-trusted-firmware.bst 
b/elements/boards/pinebook-pro/arm-trusted-firmware.bst
index df370ac90..62a2f6acc 100644
--- a/elements/boards/pinebook-pro/arm-trusted-firmware.bst
+++ b/elements/boards/pinebook-pro/arm-trusted-firmware.bst
@@ -3,6 +3,7 @@ kind: manual
 sources:
 - kind: tar
   url: github_files:ARM-software/arm-trusted-firmware/archive/v2.6.tar.gz
+  ref: 3905a6d6affa84fb629d1565a4e4bdc82812bba49a457b8249ab445eeb28011b
 
 build-depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
diff --git a/elements/boards/pinebook-pro/u-boot.bst b/elements/boards/pinebook-pro/u-boot.bst
index 40859b0ae..de438c80b 100644
--- a/elements/boards/pinebook-pro/u-boot.bst
+++ b/elements/boards/pinebook-pro/u-boot.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: https://git.eno.space/pbp-uboot.git
   track: 365495a329c8e92ca4c134562d091df71b75845e
+  ref: 365495a329c8e92ca4c134562d091df71b75845e
 
 build-depends:
 - freedesktop-sdk.bst:components/bison.bst
diff --git a/elements/boards/pinephone/arm-trusted-firmware.bst 
b/elements/boards/pinephone/arm-trusted-firmware.bst
index bf01413b9..8068586a7 100644
--- a/elements/boards/pinephone/arm-trusted-firmware.bst
+++ b/elements/boards/pinephone/arm-trusted-firmware.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: github:ARM-software/arm-trusted-firmware.git
   track: v2.7
+  ref: v2.7.0-0-g35f4c7295bafeb32c8bcbdfb6a3f2e74a57e732b
 
 build-depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
diff --git a/elements/boards/pinephone/linux.bst b/elements/boards/pinephone/linux.bst
index 8869e7bcd..52e14d1e1 100644
--- a/elements/boards/pinephone/linux.bst
+++ b/elements/boards/pinephone/linux.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: github:megous/linux.git
   track: orange-pi-5.17
+  ref: orange-pi-5.17-20220510-1956-272-gc654d072573f7e80aa18cc5fc46104ee82e278e1
 
 depends:
 - freedesktop-sdk.bst:components/kmod.bst
diff --git a/elements/boards/pinephone/u-boot.bst b/elements/boards/pinephone/u-boot.bst
index c5384f1d7..cea70de5b 100644
--- a/elements/boards/pinephone/u-boot.bst
+++ b/elements/boards/pinephone/u-boot.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git
   url: gitlab:pine64-org/u-boot.git
   track: pinephone-2021-06-22
+  ref: 378121422954a58bc0072b0c8965fdc7b2332e55
 
 build-depends:
 - freedesktop-sdk.bst:components/bison.bst
@@ -33,5 +34,5 @@ config:
   install-commands:
   - mv u-boot.img idbloader.img
   - install -Dm644 -t "%{install-root}%{indep-libdir}/u-boot/%{board}" idbloader.img
-  - mv u-boot-sunxi-with-spl.fit.itb u-boot.itb      
+  - mv u-boot-sunxi-with-spl.fit.itb u-boot.itb
   - install -Dm644 -t "%{install-root}%{indep-libdir}/u-boot/%{board}" u-boot.itb
diff --git a/elements/boards/raspberrypi-4/bsp/firmware.bst b/elements/boards/raspberrypi-4/bsp/firmware.bst
index 3ddfcade3..348eb27b8 100644
--- a/elements/boards/raspberrypi-4/bsp/firmware.bst
+++ b/elements/boards/raspberrypi-4/bsp/firmware.bst
@@ -8,6 +8,7 @@ build-depends:
 sources:
 - kind: tar
   url: github_files:raspberrypi/firmware/archive/refs/tags/1.20220830.tar.gz
+  ref: fcfa24ce0ea26c60d1a140d4220cb803269c38235a08e2b004f458d4692cb97f
 
 config:
   install-commands:
diff --git a/elements/boards/raspberrypi-4/bsp/linux.bst b/elements/boards/raspberrypi-4/bsp/linux.bst
index 6249289e3..a1457b1e7 100644
--- a/elements/boards/raspberrypi-4/bsp/linux.bst
+++ b/elements/boards/raspberrypi-4/bsp/linux.bst
@@ -6,6 +6,7 @@ sources:
   # track: 5.15.y
   track: 23a7ec81c55515e8a8d711376589f4cbc6714906
   track-tags: false
+  ref: 1.20220830-895-g23a7ec81c55515e8a8d711376589f4cbc6714906
 
 depends:
 - freedesktop-sdk.bst:components/kmod.bst
diff --git a/elements/boards/raspberrypi-4/bsp/rpi-userland.bst 
b/elements/boards/raspberrypi-4/bsp/rpi-userland.bst
index 6a717cd1d..557272a2f 100644
--- a/elements/boards/raspberrypi-4/bsp/rpi-userland.bst
+++ b/elements/boards/raspberrypi-4/bsp/rpi-userland.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: github:raspberrypi/userland.git
   track: f97b1af1b3e653f9da2c1a3643479bfd469e3b74
+  ref: f97b1af1b3e653f9da2c1a3643479bfd469e3b74
 - kind: patch
   path: files/boards/raspberrypi-4/0021-cmake-Disable-format-overflow-warning-as-error.patch
 
diff --git a/elements/boards/raspberrypi-4/bsp/u-boot.bst b/elements/boards/raspberrypi-4/bsp/u-boot.bst
index 0ac852612..44974a3fb 100644
--- a/elements/boards/raspberrypi-4/bsp/u-boot.bst
+++ b/elements/boards/raspberrypi-4/bsp/u-boot.bst
@@ -2,7 +2,8 @@ kind: manual
 
 sources:
 - kind: tar
-  url: https://ftp.denx.de/pub/u-boot/u-boot-2022.07.tar.bz2 
+  url: https://ftp.denx.de/pub/u-boot/u-boot-2022.07.tar.bz2
+  ref: 92b08eb49c24da14c1adbf70a71ae8f37cc53eeb4230e859ad8b6733d13dcf5e
 
 depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
diff --git a/elements/boards/rock64/arm-trusted-firmware.bst b/elements/boards/rock64/arm-trusted-firmware.bst
index b838cdda2..ba4983bbf 100644
--- a/elements/boards/rock64/arm-trusted-firmware.bst
+++ b/elements/boards/rock64/arm-trusted-firmware.bst
@@ -3,6 +3,7 @@ kind: manual
 sources:
 - kind: tar
   url: github_files:ARM-software/arm-trusted-firmware/archive/v2.3.tar.gz
+  ref: 304d372327d6ecabf89da67e2e1a7b2660f13b5851886fef1b58ae5a6d74e606
 
 build-depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
diff --git a/elements/boards/rock64/u-boot.bst b/elements/boards/rock64/u-boot.bst
index dff27f693..eaee17d07 100644
--- a/elements/boards/rock64/u-boot.bst
+++ b/elements/boards/rock64/u-boot.bst
@@ -3,6 +3,7 @@ kind: manual
 sources:
 - kind: tar
   url: https://ftp.denx.de/pub/u-boot/u-boot-2020.04.tar.bz2
+  ref: fe732aaf037d9cc3c0909bad8362af366ae964bbdac6913a34081ff4ad565372
 
 build-depends:
 - freedesktop-sdk.bst:components/bison.bst
diff --git a/elements/core-deps/AppStream.bst b/elements/core-deps/AppStream.bst
index fb038e052..20e27e0f4 100644
--- a/elements/core-deps/AppStream.bst
+++ b/elements/core-deps/AppStream.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: freedesktop_software:appstream/releases/AppStream-0.15.5.tar.xz
+  ref: cb15ed62cc2729683879a2dbf98c0a3267ea2b4d57bba6bc55e70a25500e04c2
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/LibRaw.bst b/elements/core-deps/LibRaw.bst
index 26467a2cf..bd09833e7 100644
--- a/elements/core-deps/LibRaw.bst
+++ b/elements/core-deps/LibRaw.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: libraw:data/LibRaw-0.20.2.tar.gz
+  ref: dc1b486c2003435733043e4e05273477326e51c3ea554c6864a4eafaff1004a6
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/LibVNCServer.bst b/elements/core-deps/LibVNCServer.bst
index fffa7ad50..d74501db1 100644
--- a/elements/core-deps/LibVNCServer.bst
+++ b/elements/core-deps/LibVNCServer.bst
@@ -3,6 +3,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_files:LibVNC/libvncserver/archive/LibVNCServer-0.9.13.tar.gz
+  ref: 0ae5bb9175dc0a602fe85c1cf591ac47ee5247b87f2bf164c16b05f87cbfa81a
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
diff --git a/elements/core-deps/ModemManager.bst b/elements/core-deps/ModemManager.bst
index ac1edcd91..966c7071d 100644
--- a/elements/core-deps/ModemManager.bst
+++ b/elements/core-deps/ModemManager.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: freedesktop_software:ModemManager/ModemManager-1.18.10.tar.xz
+  ref: 16255f8229eeeb2dfecb8dd1370360d46f1015ec85e6fba5c1cbd9f4371d65eb
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/NetworkManager.bst b/elements/core-deps/NetworkManager.bst
index 4f9315a8f..21697933c 100644
--- a/elements/core-deps/NetworkManager.bst
+++ b/elements/core-deps/NetworkManager.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:NetworkManager/1.39/NetworkManager-1.39.12.tar.xz
+  ref: 9db43ab912f4cc5595694f2c8222972c7b8495963b3c28c22a9dba06564cff3c
 build-depends:
 - core-deps/intltool.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/accountsservice.bst b/elements/core-deps/accountsservice.bst
index 7b13a97bd..41d08d5db 100644
--- a/elements/core-deps/accountsservice.bst
+++ b/elements/core-deps/accountsservice.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   base-dir: ''
   url: freedesktop_software:accountsservice/accountsservice-22.08.8.tar.xz
+  ref: 909997a76919fe7dc138a9a01cea70bd622d5a932dbc9fb13010113023a7a391
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/atkmm-1.6.bst b/elements/core-deps/atkmm-1.6.bst
index 6072b1aab..ba1c27025 100644
--- a/elements/core-deps/atkmm-1.6.bst
+++ b/elements/core-deps/atkmm-1.6.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:atkmm.git
   track: atkmm-2-28
+  ref: 2.28.3-1-g3b87c0e07159e7f72e0fb999e7aca6dc360a332a
 build-depends:
 - core-deps/graphviz.bst
 - core-deps/mm-common.bst
diff --git a/elements/core-deps/babl.bst b/elements/core-deps/babl.bst
index 0c75265e1..94290aa67 100644
--- a/elements/core-deps/babl.bst
+++ b/elements/core-deps/babl.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gimp:babl/0.1/babl-0.1.92.tar.xz
+  ref: f667735028944b6375ad18f160a64ceb93f5c7dccaa9d8751de359777488a2c1
 - kind: patch
   path: files/babl/45.patch
 build-depends:
diff --git a/elements/core-deps/boost.bst b/elements/core-deps/boost.bst
index 79a70596c..ca1aae442 100644
--- a/elements/core-deps/boost.bst
+++ b/elements/core-deps/boost.bst
@@ -3,6 +3,7 @@ kind: manual
 sources:
 - kind: tar
   url: boostorg:artifactory/main/release/1.79.0/source/boost_1_79_0.tar.bz2
+  ref: 475d589d51a7f8b3ba2ba4eda022b170e562ca3b760ee922c146b6c65856ef39
 
 depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
diff --git a/elements/core-deps/cairomm-1.0.bst b/elements/core-deps/cairomm-1.0.bst
index 0d1d64eb1..28dd2d19f 100644
--- a/elements/core-deps/cairomm-1.0.bst
+++ b/elements/core-deps/cairomm-1.0.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: cairo:releases/cairomm-1.14.3.tar.xz
+  ref: 0d37e067c5c4ca7808b7ceddabfe1932c5bd2a750ad64fb321e1213536297e78
 build-depends:
 - core-deps/graphviz.bst
 - core-deps/mm-common.bst
diff --git a/elements/core-deps/callaudiod.bst b/elements/core-deps/callaudiod.bst
index 41559fd8f..d76a01620 100644
--- a/elements/core-deps/callaudiod.bst
+++ b/elements/core-deps/callaudiod.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: gitlab:mobian1/callaudiod/-/archive/0.1.0/callaudiod-0.1.0.tar.bz2
+  ref: c44300d07ac19a37b6be23f65ea1e1b1399b0b75833977d9f7ead31a591fa70a
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/clutter-gst.bst b/elements/core-deps/clutter-gst.bst
index c5e0c9ca0..8082a89ba 100644
--- a/elements/core-deps/clutter-gst.bst
+++ b/elements/core-deps/clutter-gst.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:clutter-gst/3.0/clutter-gst-3.0.27.tar.xz
+  ref: fe69bd6c659d24ab30da3f091eb91cd1970026d431179b0724f13791e8ad9f9d
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/clutter-gtk.bst b/elements/core-deps/clutter-gtk.bst
index 5d0f8a02d..d0975d339 100644
--- a/elements/core-deps/clutter-gtk.bst
+++ b/elements/core-deps/clutter-gtk.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:clutter-gtk/1.8/clutter-gtk-1.8.4.tar.xz
+  ref: 521493ec038973c77edcb8bc5eac23eed41645117894aaee7300b2487cb42b06
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/clutter.bst b/elements/core-deps/clutter.bst
index 92219f273..a0daf9e90 100644
--- a/elements/core-deps/clutter.bst
+++ b/elements/core-deps/clutter.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:clutter/1.26/clutter-1.26.4.tar.xz
+  ref: 8b48fac159843f556d0a6be3dbfc6b083fc6d9c58a20a49a6b4919ab4263c4e6
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/cmark.bst b/elements/core-deps/cmark.bst
index 9a1b914de..82a6c0531 100644
--- a/elements/core-deps/cmark.bst
+++ b/elements/core-deps/cmark.bst
@@ -3,6 +3,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_files:commonmark/cmark/archive/refs/tags/0.30.1.tar.gz
+  ref: 9609506bd7473e769452488ef981eb53f082011b1ec6c9b6c73ed57062e25ee6
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
diff --git a/elements/core-deps/cogl.bst b/elements/core-deps/cogl.bst
index 76ead08b8..d395d6c7e 100644
--- a/elements/core-deps/cogl.bst
+++ b/elements/core-deps/cogl.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:cogl/1.22/cogl-1.22.8.tar.xz
+  ref: a805b2b019184710ff53d0496f9f0ce6dcca420c141a0f4f6fcc02131581d759
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/colord-gtk.bst b/elements/core-deps/colord-gtk.bst
index 918e6e346..093a08d20 100644
--- a/elements/core-deps/colord-gtk.bst
+++ b/elements/core-deps/colord-gtk.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: freedesktop_software:colord/releases/colord-gtk-0.3.0.tar.xz
+  ref: b9466656d66d9a6ffbc2dd04fa91c8f6af516bf9efaacb69744eec0f56f3c1d0
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/colord.bst b/elements/core-deps/colord.bst
index 2aff58ae0..f4a644afb 100644
--- a/elements/core-deps/colord.bst
+++ b/elements/core-deps/colord.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: freedesktop_software:colord/releases/colord-1.4.6.tar.xz
+  ref: 7407631a27bfe5d1b672e7ae42777001c105d860b7b7392283c8c6300de88e6f
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/cups-pk-helper.bst b/elements/core-deps/cups-pk-helper.bst
index e1bc67553..2db9f7a4d 100644
--- a/elements/core-deps/cups-pk-helper.bst
+++ b/elements/core-deps/cups-pk-helper.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: freedesktop_software:cups-pk-helper/releases/cups-pk-helper-0.2.7.tar.xz
+  ref: 66070ddb448fe9fcee76aa26be2ede5a80f85563e3a4afd59d2bfd79fbe2e831
 - kind: local
   path: files/cups-pk-helper/cups-pk-helper.service
 
diff --git a/elements/core-deps/dconf.bst b/elements/core-deps/dconf.bst
index 159f90ec4..b75d77649 100644
--- a/elements/core-deps/dconf.bst
+++ b/elements/core-deps/dconf.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:dconf.git
   track: master
+  ref: 0.40.0-2-g4057f8c84ff8c834dcd1cb82f946dd8cc49712ff
 
 build-depends:
 - sdk/vala.bst
diff --git a/elements/core-deps/dnsmasq.bst b/elements/core-deps/dnsmasq.bst
index 9cfc4c3d8..cac9bc2b2 100644
--- a/elements/core-deps/dnsmasq.bst
+++ b/elements/core-deps/dnsmasq.bst
@@ -3,6 +3,7 @@ kind: make
 sources:
 - kind: tar
   url: thekelleys:dnsmasq/dnsmasq-2.86.tar.xz
+  ref: 28d52cfc9e2004ac4f85274f52b32e1647b4dbc9761b82e7de1e41c49907eb08
 
 depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
diff --git a/elements/core-deps/dotconf.bst b/elements/core-deps/dotconf.bst
index 2a5a625d1..56b4a691a 100644
--- a/elements/core-deps/dotconf.bst
+++ b/elements/core-deps/dotconf.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:williamh/dotconf/archive/v1.3.tar.gz
+  ref: 7f1ecf40de1ad002a065a321582ed34f8c14242309c3547ad59710ae3c805653
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/ebtables.bst b/elements/core-deps/ebtables.bst
index 79f28459a..9e4045e8a 100644
--- a/elements/core-deps/ebtables.bst
+++ b/elements/core-deps/ebtables.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: netfilter:pub/ebtables/ebtables-2.0.11.tar.gz
+  ref: b71f654784a726329f88b412ef7b96b4e5d786ed2bd28193ed7b4c0d677dfd2a
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/editorconfig-core-c.bst b/elements/core-deps/editorconfig-core-c.bst
index 4c4c4b1fb..61a3b8412 100644
--- a/elements/core-deps/editorconfig-core-c.bst
+++ b/elements/core-deps/editorconfig-core-c.bst
@@ -3,6 +3,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_files:editorconfig/editorconfig-core-c/archive/refs/tags/v0.12.5.tar.gz
+  ref: b2b212e52e7ea6245e21eaf818ee458ba1c16117811a41e4998f3f2a1df298d2
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
diff --git a/elements/core-deps/eos-updater.bst b/elements/core-deps/eos-updater.bst
index 9c2c7d33f..33e54d091 100644
--- a/elements/core-deps/eos-updater.bst
+++ b/elements/core-deps/eos-updater.bst
@@ -12,6 +12,7 @@ kind: meson
 sources:
 - kind: tar
   url: github_files:endlessm/eos-updater/archive/Release_4.0.7.tar.gz
+  ref: 583fd4c02d48d38a5f3f089e654ede2448aec49aaf6d2096a1798538c844d627
 - kind: patch
   path: files/eos-updater/no-ostree-httpd.patch
 
diff --git a/elements/core-deps/espeak-ng.bst b/elements/core-deps/espeak-ng.bst
index 3b0ddf1f2..34ab2e962 100644
--- a/elements/core-deps/espeak-ng.bst
+++ b/elements/core-deps/espeak-ng.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:espeak-ng/espeak-ng/releases/download/1.50/espeak-ng-1.50.tgz
+  ref: 80ee6cd06fcd61888951ab49362b400e80dd1fac352a8b1131d90cfe8a210edb
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/evolution-data-server.bst b/elements/core-deps/evolution-data-server.bst
index ac2e14cec..a6a51581b 100644
--- a/elements/core-deps/evolution-data-server.bst
+++ b/elements/core-deps/evolution-data-server.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:evolution-data-server.git
   track: master
+  ref: 3.46.0-24-g6d359a8d7cf878de4ca6ed901c76a6e3db1d8fdd
 
 build-depends:
 - sdk/vala.bst
diff --git a/elements/core-deps/exempi.bst b/elements/core-deps/exempi.bst
index 60cb18212..fe63569f0 100644
--- a/elements/core-deps/exempi.bst
+++ b/elements/core-deps/exempi.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: libopenraw:download/exempi-2.5.2.tar.bz2
+  ref: 52f54314aefd45945d47a6ecf4bd21f362e6467fa5d0538b0d45a06bc6eaaed5
 build-depends:
 - freedesktop-sdk.bst:components/expat.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/exiv2.bst b/elements/core-deps/exiv2.bst
index 427939a95..79a727245 100644
--- a/elements/core-deps/exiv2.bst
+++ b/elements/core-deps/exiv2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_files:Exiv2/exiv2/archive/v0.27.3.tar.gz
+  ref: 6398bc743c32b85b2cb2a604273b8c90aa4eb0fd7c1700bf66cbb2712b4f00c1
 - kind: patch
   path: files/exiv2/disable-protection-flags.patch
 build-depends:
diff --git a/elements/core-deps/feedbackd.bst b/elements/core-deps/feedbackd.bst
index a891d0f1b..50c7bcccd 100644
--- a/elements/core-deps/feedbackd.bst
+++ b/elements/core-deps/feedbackd.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: purism:Librem5/feedbackd/-/archive/v0.0.0+git20210426/feedbackd-v0.0.0+git20210426.tar.bz2
+  ref: 68ff48e650bf34775091c844f988ddd9ab206af32946825440d5d82a53f0a1b2
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/flatpak-builder.bst b/elements/core-deps/flatpak-builder.bst
index 86b5f4ae2..3005a5361 100644
--- a/elements/core-deps/flatpak-builder.bst
+++ b/elements/core-deps/flatpak-builder.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:flatpak/flatpak-builder/releases/download/1.2.0/flatpak-builder-1.2.0.tar.xz
+  ref: dfcb6a3ca38d61e0775b70a469ab505285e129361462df09004e6d4251c246a8
 
 build-depends:
 - freedesktop-sdk.bst:components/docbook-xsl.bst
diff --git a/elements/core-deps/flatpak.bst b/elements/core-deps/flatpak.bst
index 5c56441ed..a2ea326a2 100644
--- a/elements/core-deps/flatpak.bst
+++ b/elements/core-deps/flatpak.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:flatpak/flatpak/releases/download/1.14.0/flatpak-1.14.0.tar.xz
+  ref: 8e276973770ea24ddf2597ad4aecd36b98393e6bde91e48e1743aaca67f27815
 
 build-depends:
 - core-deps/python-pyparsing.bst
diff --git a/elements/core-deps/folks.bst b/elements/core-deps/folks.bst
index cbfd3e230..a677df547 100644
--- a/elements/core-deps/folks.bst
+++ b/elements/core-deps/folks.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:folks.git
   track: master
+  ref: 0.15.5-11-g8f472fc382e81464cb9da5090638071c3c646226
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/freerdp.bst b/elements/core-deps/freerdp.bst
index d6af17c82..c487b4430 100644
--- a/elements/core-deps/freerdp.bst
+++ b/elements/core-deps/freerdp.bst
@@ -3,6 +3,7 @@ kind: cmake
 sources:
 - kind: tar
   url: freerdp:releases/freerdp-2.8.0.tar.gz
+  ref: fd26a41c367ea1f23a06716725d19efa41fd572c4536348d39b3465b116b3703
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
diff --git a/elements/core-deps/fwupd-efi.bst b/elements/core-deps/fwupd-efi.bst
index 815f328cd..45c200d7a 100644
--- a/elements/core-deps/fwupd-efi.bst
+++ b/elements/core-deps/fwupd-efi.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: github_files:fwupd/fwupd-efi/archive/refs/tags/1.3.tar.gz
+  ref: 0e76057c178e221f63eaf9142fa1d06780a8eb3df7cf0c11f92660138dec5c83
 - kind: patch
   path: files/fwupd/riscv64.patch
 
diff --git a/elements/core-deps/fwupd.bst b/elements/core-deps/fwupd.bst
index 547444b41..0e0a58fde 100644
--- a/elements/core-deps/fwupd.bst
+++ b/elements/core-deps/fwupd.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: github_files:fwupd/fwupd/releases/download/1.8.4/fwupd-1.8.4.tar.xz
+  ref: adfa07434cdc29ec41c40fef460e8d970963fe0c7e849dec7f3932adb161f886
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gegl.bst b/elements/core-deps/gegl.bst
index 4fa64b884..25a8152f6 100644
--- a/elements/core-deps/gegl.bst
+++ b/elements/core-deps/gegl.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: gimp:gegl/0.4/gegl-0.4.38.tar.xz
+  ref: e4a33c8430a5042fba8439b595348e71870f0d95fbf885ff553f9020c1bed750
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/geocode-glib.bst b/elements/core-deps/geocode-glib.bst
index 36a1aac8a..793934f30 100644
--- a/elements/core-deps/geocode-glib.bst
+++ b/elements/core-deps/geocode-glib.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:geocode-glib.git
   track: master
+  ref: 3.26.4-0-g210abe69d68e38947106f4680631c369b0c23189
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gexiv2.bst b/elements/core-deps/gexiv2.bst
index e31a9c036..3768f557b 100644
--- a/elements/core-deps/gexiv2.bst
+++ b/elements/core-deps/gexiv2.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gexiv2/0.14/gexiv2-0.14.0.tar.xz
+  ref: e58279a6ff20b6f64fa499615da5e9b57cf65ba7850b72fafdf17221a9d6d69e
 
 build-depends:
 - sdk/pygobject.bst
diff --git a/elements/core-deps/glib-testing.bst b/elements/core-deps/glib-testing.bst
index d8a972840..216b9d123 100644
--- a/elements/core-deps/glib-testing.bst
+++ b/elements/core-deps/glib-testing.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: tecnocode:libglib-testing-0.1.0.tar.xz
+  ref: cf1e72007ce656a4e23432ac61082f7b87a9baaed57c4b0b0bf872ce7e2fb6e7
 
 build-depends:
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/glibmm-2.4.bst b/elements/core-deps/glibmm-2.4.bst
index fcbcfa686..fd99a28e8 100644
--- a/elements/core-deps/glibmm-2.4.bst
+++ b/elements/core-deps/glibmm-2.4.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:glibmm.git
   track: glibmm-2-66
+  ref: 2.66.5-1-g34fa010d4722628c5bc270dca904491e912d27c1
 build-depends:
 - core-deps/graphviz.bst
 - core-deps/mm-common.bst
diff --git a/elements/core-deps/gmime.bst b/elements/core-deps/gmime.bst
index bd4d4ef23..35e5b33be 100644
--- a/elements/core-deps/gmime.bst
+++ b/elements/core-deps/gmime.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gmime.git
   track: master
+  ref: 3.2.3-51-g6bff5288f9c108160dd56dd20a9c6608aa55f791
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gnome-autoar.bst b/elements/core-deps/gnome-autoar.bst
index e5dbd39a8..5e2bba803 100644
--- a/elements/core-deps/gnome-autoar.bst
+++ b/elements/core-deps/gnome-autoar.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-autoar.git
   track: master
+  ref: 0.4.3-3-g15e057226ccaf217bb1ca1e3e5a8ac18e97d1fe5
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gnome-online-accounts.bst b/elements/core-deps/gnome-online-accounts.bst
index e2f6a999c..aa6ba064f 100644
--- a/elements/core-deps/gnome-online-accounts.bst
+++ b/elements/core-deps/gnome-online-accounts.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-online-accounts.git
   track: master
+  ref: 3.46.0-3-g9c661607cca7739c67a2fce0fffc9f51f168254f
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gnome-video-effects.bst b/elements/core-deps/gnome-video-effects.bst
index 73b246714..256d1ad9d 100644
--- a/elements/core-deps/gnome-video-effects.bst
+++ b/elements/core-deps/gnome-video-effects.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-video-effects.git
   track: master
+  ref: 0.5.0-16-g6ca75e10dd1f5f4f4f57d6ba352612c06e0c541b
 build-depends:
 - freedesktop-sdk.bst:components/perl-xml-parser.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/gom.bst b/elements/core-deps/gom.bst
index 1e2d90d69..34d2507f0 100644
--- a/elements/core-deps/gom.bst
+++ b/elements/core-deps/gom.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gom.git
   track: master
+  ref: 0.4-17-g90a2e73e9b9f54b5a64210989a741503b406edbf
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core-deps/graphviz.bst b/elements/core-deps/graphviz.bst
index a215e077a..535778098 100644
--- a/elements/core-deps/graphviz.bst
+++ b/elements/core-deps/graphviz.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gitlab:graphviz/graphviz/-/archive/2.47.1/graphviz-2.47.1.tar.gz
+  ref: b7f4d6819e4dc17c15e7e07bd1ea5e081ef6569b63f8427117dac32f0e3837b4
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/grilo-plugins.bst b/elements/core-deps/grilo-plugins.bst
index 85f0e783f..62c50da09 100644
--- a/elements/core-deps/grilo-plugins.bst
+++ b/elements/core-deps/grilo-plugins.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:grilo-plugins.git
   track: master
+  ref: grilo-plugins-0.3.15-10-g8fa3eec6c86a969cd03ceb62098c69818869e0df
 build-depends:
 - freedesktop-sdk.bst:components/itstool.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/grilo.bst b/elements/core-deps/grilo.bst
index 772f086de..371fd2058 100644
--- a/elements/core-deps/grilo.bst
+++ b/elements/core-deps/grilo.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:grilo.git
   track: master
+  ref: grilo-0.3.15-11-gca5d6c827fab1cfdd5d4b1a0a0d65f86fe6adac1
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gsound.bst b/elements/core-deps/gsound.bst
index e61c22bcc..8176a2220 100644
--- a/elements/core-deps/gsound.bst
+++ b/elements/core-deps/gsound.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gsound.git
   track: master
+  ref: 1.0.3-0-g95d36d60cf53e0e7c5d5325e0f1f4fc765a611ae
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/gspell.bst b/elements/core-deps/gspell.bst
index 634e64ac1..fc23b7cb2 100644
--- a/elements/core-deps/gspell.bst
+++ b/elements/core-deps/gspell.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gspell.git
   track: master
+  ref: 1.12.0-0-g433999a26171030de17dcdceabeae3c4274352a4
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gssdp.bst b/elements/core-deps/gssdp.bst
index 697328aec..531bf9633 100644
--- a/elements/core-deps/gssdp.bst
+++ b/elements/core-deps/gssdp.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gssdp.git
   track: master
+  ref: gssdp-1.6.0-0-g6eeaf27aec6ff11f325ff633b52bd56dbc1435aa
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/core-deps/gst-editing-services.bst b/elements/core-deps/gst-editing-services.bst
index bf23357a8..ea99a7bda 100644
--- a/elements/core-deps/gst-editing-services.bst
+++ b/elements/core-deps/gst-editing-services.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: gstreamer:src/gstreamer-editing-services/gstreamer-editing-services-1.16.3.tar.xz
+  ref: 9b05cbb8a6f1db53999e7ad11f00f4f1ccc154d6805b7e49cb7755eb37a99ba6
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gtk-vnc.bst b/elements/core-deps/gtk-vnc.bst
index c68614036..17fa4e4d3 100644
--- a/elements/core-deps/gtk-vnc.bst
+++ b/elements/core-deps/gtk-vnc.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gtk-vnc.git
   track: master
+  ref: v1.3.1-5-g1b462ffde3f8b8498630d83a371e73a48ece2ee4
   submodules:
     subprojects/keycodemapdb:
       checkout: true
diff --git a/elements/core-deps/gtkmm-3.bst b/elements/core-deps/gtkmm-3.bst
index fb1539e14..d07772c7e 100644
--- a/elements/core-deps/gtkmm-3.bst
+++ b/elements/core-deps/gtkmm-3.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gtkmm.git
   track: gtkmm-3-24
+  ref: 3.24.7-4-g1c3532e3042d189121551bb0aa544f1edeef456e
 build-depends:
 - core-deps/graphviz.bst
 - core-deps/mm-common.bst
diff --git a/elements/core-deps/gupnp-av.bst b/elements/core-deps/gupnp-av.bst
index 6cb47afb3..f9af57307 100644
--- a/elements/core-deps/gupnp-av.bst
+++ b/elements/core-deps/gupnp-av.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gupnp-av.git
   track: master
+  ref: gupnp-av-0.14.1-2-g767388bc16e08d4e1e1f419555165cc1816be931
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gupnp-dlna.bst b/elements/core-deps/gupnp-dlna.bst
index f19205440..05cd48aea 100644
--- a/elements/core-deps/gupnp-dlna.bst
+++ b/elements/core-deps/gupnp-dlna.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gupnp-dlna.git
   track: master
+  ref: gupnp-dlna-0.12.0-2-g6e558721f3bcc1725b95e0b4de14a4dbb947042e
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gupnp.bst b/elements/core-deps/gupnp.bst
index b1a3842d4..0c2e25837 100644
--- a/elements/core-deps/gupnp.bst
+++ b/elements/core-deps/gupnp.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gupnp.git
   track: master
+  ref: gupnp-1.6.0-0-gf05648e240c99be32911fb0c6de84e5954470e56
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/intltool.bst b/elements/core-deps/intltool.bst
index e739c47d5..276d0fabc 100644
--- a/elements/core-deps/intltool.bst
+++ b/elements/core-deps/intltool.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: launchpad:intltool/trunk/0.51.0/+download/intltool-0.51.0.tar.gz
+  ref: 67c74d94196b153b774ab9f89b2fa6c6ba79352407037c8c14d5aeb334e959cd
 - kind: patch
   path: files/intltool/intltool-perl-5.22-compatibility.patch
 build-depends:
diff --git a/elements/core-deps/jsonrpc-glib.bst b/elements/core-deps/jsonrpc-glib.bst
index c9d3d7286..c27162bea 100644
--- a/elements/core-deps/jsonrpc-glib.bst
+++ b/elements/core-deps/jsonrpc-glib.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:jsonrpc-glib.git
   track: main
+  ref: 3.42.0-1-g2251592127cbba7d9e6c7bdcef51f8f503f7c02b
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libbluray.bst b/elements/core-deps/libbluray.bst
index 1df0e8427..63316cb16 100644
--- a/elements/core-deps/libbluray.bst
+++ b/elements/core-deps/libbluray.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: videolan:pub/videolan/libbluray/1.3.2/libbluray-1.3.2.tar.bz2
+  ref: 456814db9f07c1eecdef7e840fcbb20976ef814df875428bfb81ecf45851f170
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libcacard.bst b/elements/core-deps/libcacard.bst
index 07ce42aab..87eec5d59 100644
--- a/elements/core-deps/libcacard.bst
+++ b/elements/core-deps/libcacard.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: freedesktop_files:spice/libcacard/uploads/9d8f24b131bcbbd7846727ea92952cb5/libcacard-2.8.0.tar.xz
+  ref: 8005b93c3139ff739057efb19f9dac1d0993ffb0b913111505af6a91711ef22b
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core-deps/libcanberra.bst b/elements/core-deps/libcanberra.bst
index c46cca393..660c6f8b6 100644
--- a/elements/core-deps/libcanberra.bst
+++ b/elements/core-deps/libcanberra.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: 0pointer:lennart/projects/libcanberra/libcanberra-0.30.tar.xz
+  ref: c2b671e67e0c288a69fc33dc1b6f1b534d07882c2aceed37004bf48c601afa72
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libcdio-paranoia.bst b/elements/core-deps/libcdio-paranoia.bst
index 5c5749fea..92591b720 100644
--- a/elements/core-deps/libcdio-paranoia.bst
+++ b/elements/core-deps/libcdio-paranoia.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:libcdio/libcdio-paranoia-10.2+2.0.1.tar.gz
+  ref: 28d7d00e4a83d0221acda0fd2eb3e3240bf094db4c00a85998922201939fa952
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libcdio.bst b/elements/core-deps/libcdio.bst
index 7b4570c89..cec2f40ce 100644
--- a/elements/core-deps/libcdio.bst
+++ b/elements/core-deps/libcdio.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:libcdio/libcdio-2.1.0.tar.bz2
+  ref: 8550e9589dbd594bfac93b81ecf129b1dc9d0d51e90f9696f1b2f9b2af32712b
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libcloudproviders.bst b/elements/core-deps/libcloudproviders.bst
index 0b8172d14..93fa4f2f3 100644
--- a/elements/core-deps/libcloudproviders.bst
+++ b/elements/core-deps/libcloudproviders.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:libcloudproviders/0.3/libcloudproviders-0.3.1.tar.xz
+  ref: 4763213ca1e1fe30d422f5ae3b4f02a454f63414c1860ad142d6385f89d05929
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libcue.bst b/elements/core-deps/libcue.bst
index 09d26f9ad..349a043c8 100644
--- a/elements/core-deps/libcue.bst
+++ b/elements/core-deps/libcue.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_files:lipnitsk/libcue/archive/v2.2.1.tar.gz
+  ref: f27bc3ebb2e892cd9d32a7bee6d84576a60f955f29f748b9b487b173712f1200
 build-depends:
 - freedesktop-sdk.bst:components/bison.bst
 - freedesktop-sdk.bst:components/flex.bst
diff --git a/elements/core-deps/libdazzle.bst b/elements/core-deps/libdazzle.bst
index d58c384d7..c632b7f7c 100644
--- a/elements/core-deps/libdazzle.bst
+++ b/elements/core-deps/libdazzle.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:libdazzle.git
   track: master
+  ref: 3.44.0-2-ga94c074fd19a2f0d325b15c853ad600424e6040a
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/libdvdread.bst b/elements/core-deps/libdvdread.bst
index d9c0283d9..08a5011a9 100644
--- a/elements/core-deps/libdvdread.bst
+++ b/elements/core-deps/libdvdread.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: videolan:pub/videolan/libdvdread/6.1.3/libdvdread-6.1.3.tar.bz2
+  ref: ce35454997a208cbe50e91232f0e73fb1ac3471965813a13b8730a8f18a15369
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libgdata.bst b/elements/core-deps/libgdata.bst
index 1412b24b3..f85891645 100644
--- a/elements/core-deps/libgdata.bst
+++ b/elements/core-deps/libgdata.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:libgdata.git
   track: libgdata-0-18
+  ref: 0.18.1-19-g2ebe0f47887f43c382facc307ca51026ff08490d
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libgit2-glib.bst b/elements/core-deps/libgit2-glib.bst
index b73536a49..5042a266a 100644
--- a/elements/core-deps/libgit2-glib.bst
+++ b/elements/core-deps/libgit2-glib.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:libgit2-glib.git
   track: master
+  ref: v1.0.0.1-18-g258a06a584be3978bc9cca1855ccda27fd79de3b
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/libgit2.bst b/elements/core-deps/libgit2.bst
index de687db34..3eedf912a 100644
--- a/elements/core-deps/libgit2.bst
+++ b/elements/core-deps/libgit2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_files:libgit2/libgit2/archive/v1.4.4.tar.gz
+  ref: e9923e9916a32f54c661d55d79c28fa304cb23617639e68bff9f94d3e18f2d4b
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 depends:
diff --git a/elements/core-deps/libgnomekbd.bst b/elements/core-deps/libgnomekbd.bst
index 8488bd900..8bfe31273 100644
--- a/elements/core-deps/libgnomekbd.bst
+++ b/elements/core-deps/libgnomekbd.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:libgnomekbd.git
   track: master
+  ref: 3.28.1-7-gcff39545e7fbf2475557b1ed4583d5d43bb4fb55
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libgphoto2.bst b/elements/core-deps/libgphoto2.bst
index e1549386b..af6efd0a7 100644
--- a/elements/core-deps/libgphoto2.bst
+++ b/elements/core-deps/libgphoto2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:gphoto/libgphoto2/releases/download/v2.5.27/libgphoto2-2.5.27.tar.xz
+  ref: a7253bd18c6ef65352150ac36a668f883a5ad2634eb6455b3ca9aa6ac98d0073
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/libgsf.bst b/elements/core-deps/libgsf.bst
index 9e0035e39..8f6d8ade8 100644
--- a/elements/core-deps/libgsf.bst
+++ b/elements/core-deps/libgsf.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:libgsf.git
   track: master
+  ref: LIBGSF_1_14_50-6-gc6d8737a13f3c8a78b1be1b47c582495ed251ec0
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libgsystemservice.bst b/elements/core-deps/libgsystemservice.bst
index 83d3ad9b9..f4816d6b5 100644
--- a/elements/core-deps/libgsystemservice.bst
+++ b/elements/core-deps/libgsystemservice.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome_gitlab:pwithnall/libgsystemservice.git
   track: 0.2.0
+  ref: 0.2.0-0-gbb53a665a769dadb85d2e1197572ee7fe919f56d
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/libgtop.bst b/elements/core-deps/libgtop.bst
index 47be265ea..fe84ae0a3 100644
--- a/elements/core-deps/libgtop.bst
+++ b/elements/core-deps/libgtop.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:libgtop.git
   track: master
+  ref: 2.40.0-91-g507809b648634c6251e9aeeb8ffae1d38c5be5f7
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:components/texinfo.bst
diff --git a/elements/core-deps/libgusb.bst b/elements/core-deps/libgusb.bst
index bd37a0dd4..213a2d45d 100644
--- a/elements/core-deps/libgusb.bst
+++ b/elements/core-deps/libgusb.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: freedesktop_people:~hughsient/releases/libgusb-0.3.10.tar.xz
+  ref: 0eb0b9ab0f8bba0c59631c809c37b616ef34eb3c8e000b0b9b71cf11e4931bdc
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libgweather.bst b/elements/core-deps/libgweather.bst
index 7a3fa0c64..f4e99edff 100644
--- a/elements/core-deps/libgweather.bst
+++ b/elements/core-deps/libgweather.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:libgweather.git
   track: main
+  ref: 4.2.0-5-g018733886c7fccfa8230a38bc735fe77a9c929da
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/core-deps/libgxps.bst b/elements/core-deps/libgxps.bst
index ce4ca0f21..658a02325 100644
--- a/elements/core-deps/libgxps.bst
+++ b/elements/core-deps/libgxps.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:libgxps.git
   track: master
+  ref: 0.3.2-4-g0397b2b6f71780dd9eeef8894b72e1e15a93858f
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libimobiledevice.bst b/elements/core-deps/libimobiledevice.bst
index 1c7e43dcc..a4cccffcf 100644
--- a/elements/core-deps/libimobiledevice.bst
+++ b/elements/core-deps/libimobiledevice.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:libimobiledevice/libimobiledevice/releases/download/1.3.0/libimobiledevice-1.3.0.tar.bz2
+  ref: 53f2640c6365cd9f302a6248f531822dc94a6cced3f17128d4479a77bd75b0f6
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libinput.bst b/elements/core-deps/libinput.bst
index 874b3780a..454a3d149 100644
--- a/elements/core-deps/libinput.bst
+++ b/elements/core-deps/libinput.bst
@@ -20,3 +20,4 @@ variables:
 sources:
 - kind: tar
   url: freedesktop_software:libinput/libinput-1.19.4.tar.xz
+  ref: ff33a570b5a936c81e6c08389a8581c2665311d026ce3d225c88d09c49f9b440
diff --git a/elements/core-deps/libjcat.bst b/elements/core-deps/libjcat.bst
index 2b99c4a22..cbe0eb3b8 100644
--- a/elements/core-deps/libjcat.bst
+++ b/elements/core-deps/libjcat.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: github_files:hughsie/libjcat/archive/0.1.6.tar.gz
+  ref: 8de77399dd3f7cd055f07003e6fce438ef8339e2bfd90c29982b7ee0a2e72884
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libmbim.bst b/elements/core-deps/libmbim.bst
index 3608ec86c..94699c286 100644
--- a/elements/core-deps/libmbim.bst
+++ b/elements/core-deps/libmbim.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: freedesktop_software:libmbim/libmbim-1.26.4.tar.xz
+  ref: f688cec4c4586a17575f5e327448ce62f2000ef6a07c9e4589873d4a68568ad9
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libmediaart.bst b/elements/core-deps/libmediaart.bst
index 2852375cc..0a02723f6 100644
--- a/elements/core-deps/libmediaart.bst
+++ b/elements/core-deps/libmediaart.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:libmediaart.git
   track: master
+  ref: 1.9.6-0-g69b4176bccb8032180fd8d48bb8b035c60acd203
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libmtp.bst b/elements/core-deps/libmtp.bst
index 3d565881b..f763f2c48 100644
--- a/elements/core-deps/libmtp.bst
+++ b/elements/core-deps/libmtp.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: sourceforge:libmtp/libmtp/1.1.18/libmtp-1.1.18.tar.gz
+  ref: 7280fe50c044c818a06667f45eabca884deab3193caa8682e0b581e847a281f0
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libnfs.bst b/elements/core-deps/libnfs.bst
index 8674eea80..b5e65ebfd 100644
--- a/elements/core-deps/libnfs.bst
+++ b/elements/core-deps/libnfs.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:sahlberg/libnfs/archive/refs/tags/libnfs-4.0.0.tar.gz
+  ref: 6ee77e9fe220e2d3e3b1f53cfea04fb319828cc7dbb97dd9df09e46e901d797d
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libnma.bst b/elements/core-deps/libnma.bst
index a1ee718cd..5a105a154 100644
--- a/elements/core-deps/libnma.bst
+++ b/elements/core-deps/libnma.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:libnma.git
   track: main
+  ref: 1.10.3-dev-0-gee94568bac7b7c2179a340158b14fa1f48b454ab
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/liboauth.bst b/elements/core-deps/liboauth.bst
index baaee7ad5..c1b287e74 100644
--- a/elements/core-deps/liboauth.bst
+++ b/elements/core-deps/liboauth.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: sourceforge:liboauth/liboauth-1.0.3.tar.gz
+  ref: 0df60157b052f0e774ade8a8bac59d6e8d4b464058cc55f9208d72e41156811f
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libosinfo.bst b/elements/core-deps/libosinfo.bst
index 2105f87f0..d6424c1c0 100644
--- a/elements/core-deps/libosinfo.bst
+++ b/elements/core-deps/libosinfo.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: pagure_releases:libosinfo/libosinfo-1.10.0.tar.xz
+  ref: a252e00fc580deb21da0da8c0aa03b8c31e8440b8448c8b98143fab477d32305
 - kind: local
   path: files/libosinfo/pci.ids
 - kind: local
diff --git a/elements/core-deps/libostree.bst b/elements/core-deps/libostree.bst
index 2b4757be1..bb50c3afe 100644
--- a/elements/core-deps/libostree.bst
+++ b/elements/core-deps/libostree.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:ostreedev/ostree/releases/download/v2022.5/libostree-2022.5.tar.xz
+  ref: 914c4d993bc111d7dd30ae9721b6ffe8ab56eb1fd6e81b097b09f400cc1b053f
 - kind: patch
   path: files/ostree/no-boot-symlink.patch
 
diff --git a/elements/core-deps/libpanel.bst b/elements/core-deps/libpanel.bst
index b864e0dc2..1fd078b77 100644
--- a/elements/core-deps/libpanel.bst
+++ b/elements/core-deps/libpanel.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:libpanel.git
   track: main
+  ref: 1.0.0-22-g06f20b613fc8dbf6cdda6f789535fa33f3e0ce3c
 build-depends:
 - sdk-deps/gi-docgen.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libpcap.bst b/elements/core-deps/libpcap.bst
index bee50db1b..2f46c430a 100644
--- a/elements/core-deps/libpcap.bst
+++ b/elements/core-deps/libpcap.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tcpdump:release/libpcap-1.10.1.tar.gz
+  ref: ed285f4accaf05344f90975757b3dbfe772ba41d1c401c2648b7fa45b711bdd4
 
 build-depends:
 - freedesktop-sdk.bst:components/bison.bst
diff --git a/elements/core-deps/libpeas.bst b/elements/core-deps/libpeas.bst
index b0a43ec17..426d1ac65 100644
--- a/elements/core-deps/libpeas.bst
+++ b/elements/core-deps/libpeas.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:libpeas.git
   track: master
+  ref: libpeas-1.34.0-2-g94e55ab2ed47fe2b75f21aac51177bdc018b8fe6
 build-depends:
 - sdk-deps/gi-docgen.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libportal.bst b/elements/core-deps/libportal.bst
index 81eba6aa1..895deb0f0 100644
--- a/elements/core-deps/libportal.bst
+++ b/elements/core-deps/libportal.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: github_files:flatpak/libportal/releases/download/0.6/libportal-0.6.tar.xz
+  ref: 88a12c3ba71bc31acff7238c280de697d609cebc50830c3766776ec35abc6566
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/core-deps/libqmi.bst b/elements/core-deps/libqmi.bst
index f07771718..f512fe3a6 100644
--- a/elements/core-deps/libqmi.bst
+++ b/elements/core-deps/libqmi.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: freedesktop_software:libqmi/libqmi-1.30.8.tar.xz
+  ref: 862482ce9e3ad0bd65d264334ee311cdb94b9df2863b5b7136309b41b8ac1990
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/librest.bst b/elements/core-deps/librest.bst
index 7606efab7..69310154b 100644
--- a/elements/core-deps/librest.bst
+++ b/elements/core-deps/librest.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:librest.git
   track: master
+  ref: 0.9.1-8-g5970778a89f33352b59da689cdb7d088555b1d53
 build-depends:
 - sdk-deps/gi-docgen.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libshumate.bst b/elements/core-deps/libshumate.bst
index f8c9af15b..e074dd1df 100644
--- a/elements/core-deps/libshumate.bst
+++ b/elements/core-deps/libshumate.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:libshumate.git
   track: main
+  ref: 1.0.1-5-ge81959276cccff3b3c4c9fc7a0fec90a42819210
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/core-deps/libsigcplusplus-2.0.bst b/elements/core-deps/libsigcplusplus-2.0.bst
index e5d53db38..9f1bee2c0 100644
--- a/elements/core-deps/libsigcplusplus-2.0.bst
+++ b/elements/core-deps/libsigcplusplus-2.0.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: github:libsigcplusplus/libsigcplusplus.git
   track: libsigc++-2-12
+  ref: 2.10.8-9-gef672fcb4099fc586e791e67fe41fe48639005c4
 build-depends:
 - core-deps/graphviz.bst
 - core-deps/mm-common.bst
diff --git a/elements/core-deps/libssh2.bst b/elements/core-deps/libssh2.bst
index e3a525a2e..6145ad4e1 100644
--- a/elements/core-deps/libssh2.bst
+++ b/elements/core-deps/libssh2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_files:libssh2/libssh2/archive/libssh2-1.9.0.tar.gz
+  ref: db257d41754b16518c3bd0c3b8dd08940ccbee5fc44cef7bfb052d930bcbbda3
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 depends:
diff --git a/elements/core-deps/libusbmuxd.bst b/elements/core-deps/libusbmuxd.bst
index 553b3e465..808a80b2d 100644
--- a/elements/core-deps/libusbmuxd.bst
+++ b/elements/core-deps/libusbmuxd.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:libimobiledevice/libusbmuxd/releases/download/2.0.2/libusbmuxd-2.0.2.tar.bz2
+  ref: cc6a808553da4efa9fa5638be256d5ae020498795d9d260d280b87074e799b20
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libvirt-glib.bst b/elements/core-deps/libvirt-glib.bst
index 164c282e3..e486e004c 100644
--- a/elements/core-deps/libvirt-glib.bst
+++ b/elements/core-deps/libvirt-glib.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: libvirt:glib/libvirt-glib-4.0.0.tar.xz
+  ref: 8423f7069daa476307321d1c11e2ecc285340cd32ca9fc05207762843edeacbd
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/libvirt.bst b/elements/core-deps/libvirt.bst
index b266b9b4b..ceba79118 100644
--- a/elements/core-deps/libvirt.bst
+++ b/elements/core-deps/libvirt.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: libvirt:libvirt-8.7.0.tar.xz
+  ref: 72e63a0f27911e339afd8269c6e8b029721893940edec11e09e471944f60e538
 - kind: local
   path: files/libvirt/80-libvirt.preset
 build-depends:
diff --git a/elements/core-deps/libxklavier.bst b/elements/core-deps/libxklavier.bst
index d337a6cbb..dcffe1036 100644
--- a/elements/core-deps/libxklavier.bst
+++ b/elements/core-deps/libxklavier.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: freedesktop_people:~svu/libxklavier-5.4.tar.bz2
+  ref: 17a34194df5cbcd3b7bfd0f561d95d1f723aa1c87fca56bc2c209514460a9320
 
 build-depends:
 - core-deps/intltool.bst
diff --git a/elements/core-deps/lmdb.bst b/elements/core-deps/lmdb.bst
index aafa77b88..f2dc20f8e 100644
--- a/elements/core-deps/lmdb.bst
+++ b/elements/core-deps/lmdb.bst
@@ -16,3 +16,4 @@ config:
 sources:
 - kind: tar
   url: github_files:LMDB/lmdb/archive/LMDB_0.9.28.tar.gz
+  ref: 47457d3d3ae2c489b52078a07e9f55ec6e094b48c2204029c7754e2972fe1882
diff --git a/elements/core-deps/malcontent.bst b/elements/core-deps/malcontent.bst
index 438fdf6bd..916c707b3 100644
--- a/elements/core-deps/malcontent.bst
+++ b/elements/core-deps/malcontent.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: freedesktop_files:pwithnall/malcontent/-/archive/0.11.0/malcontent-0.11.0.tar.gz
+  ref: e6b94831afe255818a881813ed161bd75e713cca0a052d909ec7e683f0e76960
 
 build-depends:
 - core-deps/glib-testing.bst
diff --git a/elements/core-deps/mm-common.bst b/elements/core-deps/mm-common.bst
index 62b9ae8ed..7bb616924 100644
--- a/elements/core-deps/mm-common.bst
+++ b/elements/core-deps/mm-common.bst
@@ -20,6 +20,7 @@ sources:
 - kind: git_tag
   url: gnome:mm-common.git
   track: master
+  ref: 1.0.4-5-g863ee6494bbb2587c662ea20243897eebf146b21
 - kind: local
   path: files/mm-common/libstdc++.tag
   directory: doctags/
diff --git a/elements/core-deps/mobile-broadband-provider-info.bst 
b/elements/core-deps/mobile-broadband-provider-info.bst
index 1d3a4633e..001a2a3cc 100644
--- a/elements/core-deps/mobile-broadband-provider-info.bst
+++ b/elements/core-deps/mobile-broadband-provider-info.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:mobile-broadband-provider-info.git
   track: main
+  ref: 20220725-10-g415b3eb9c7f640eabbedfd18b44da6e58ac3820d
 
 build-depends:
 - freedesktop-sdk.bst:components/libxslt.bst
diff --git a/elements/core-deps/mogwai.bst b/elements/core-deps/mogwai.bst
index 10f304d6d..527b1d072 100644
--- a/elements/core-deps/mogwai.bst
+++ b/elements/core-deps/mogwai.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: github_files:endlessm/mogwai/archive/refs/tags/Version_0.3.0.tar.gz
+  ref: 9b2c6da0332b93d2d86ec519a1d93dd5dae5cef5f20d375f6837b6aa591d2bae
 - kind: patch
   path: files/mogwai/9b2fad24f954af6b8b1036a75f95ca965279a10b.patch
 
diff --git a/elements/core-deps/mpc.bst b/elements/core-deps/mpc.bst
index 73b52fc70..9a818abb6 100644
--- a/elements/core-deps/mpc.bst
+++ b/elements/core-deps/mpc.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:mpc/mpc-1.2.1.tar.gz
+  ref: 17503d2c395dfcf106b622dc142683c1199431d095367c6aacba6eec30340459
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/nv-codec-headers.bst b/elements/core-deps/nv-codec-headers.bst
index 05e3d437e..b3ac324b0 100644
--- a/elements/core-deps/nv-codec-headers.bst
+++ b/elements/core-deps/nv-codec-headers.bst
@@ -3,6 +3,7 @@ kind: make
 sources:
 - kind: tar
   url: github_files:FFmpeg/nv-codec-headers/releases/download/n11.1.5.1/nv-codec-headers-11.1.5.1.tar.gz
+  ref: a28cdde3ac0e9e02c2dde7a1b4de5333b4ac6148a8332ca712da243a3361a0d9
 
 depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
diff --git a/elements/core-deps/openldap.bst b/elements/core-deps/openldap.bst
index 317f484a0..249351aea 100644
--- a/elements/core-deps/openldap.bst
+++ b/elements/core-deps/openldap.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: openldap:software/download/OpenLDAP/openldap-release/openldap-2.6.0.tgz
+  ref: b71c580eac573e9aba15d95f33dd4dd08f2ed4f0d7fc09e08ad4be7ed1e41a4f
 
 build-depends:
 - freedesktop-sdk.bst:components/groff.bst
diff --git a/elements/core-deps/osinfo-db-tools.bst b/elements/core-deps/osinfo-db-tools.bst
index ce07ca66b..de5dbf9e7 100644
--- a/elements/core-deps/osinfo-db-tools.bst
+++ b/elements/core-deps/osinfo-db-tools.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: pagure_releases:libosinfo/osinfo-db-tools-1.10.0.tar.xz
+  ref: 802cdd53b416706ea5844f046ddcfb658c1b4906b9f940c79ac7abc50981ca68
 build-depends:
 - freedesktop-sdk.bst:components/libxslt.bst
 - freedesktop-sdk.bst:components/perl-xml-parser.bst
diff --git a/elements/core-deps/osinfo-db.bst b/elements/core-deps/osinfo-db.bst
index 51db28c59..c50da43d1 100644
--- a/elements/core-deps/osinfo-db.bst
+++ b/elements/core-deps/osinfo-db.bst
@@ -2,6 +2,7 @@ kind: manual
 sources:
 - kind: remote
   url: pagure_releases:libosinfo/osinfo-db-20220727.tar.xz
+  ref: 2291e5234ed899a830c36f2b4056ff5e76235f4ba07b593421f4865290634d5e
 build-depends:
 - core-deps/osinfo-db-tools.bst
 
diff --git a/elements/core-deps/pangomm-1.4.bst b/elements/core-deps/pangomm-1.4.bst
index 56ba6790e..366bd5db1 100644
--- a/elements/core-deps/pangomm-1.4.bst
+++ b/elements/core-deps/pangomm-1.4.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:pangomm.git
   track: pangomm-2-46
+  ref: 2.46.3-1-g699c4ac56d69fd95a351b1cac137141d9490b349
 build-depends:
 - core-deps/graphviz.bst
 - core-deps/mm-common.bst
diff --git a/elements/core-deps/perl-parse-yapp.bst b/elements/core-deps/perl-parse-yapp.bst
index 3bb49ce04..0c1f53eeb 100644
--- a/elements/core-deps/perl-parse-yapp.bst
+++ b/elements/core-deps/perl-parse-yapp.bst
@@ -3,6 +3,7 @@ kind: manual
 sources:
 - kind: tar
   url: cpan:authors/id/W/WB/WBRASWELL/Parse-Yapp-1.21.tar.gz
+  ref: 3810e998308fba2e0f4f26043035032b027ce51ce5c8a52a8b8e340ca65f13e5
 
 depends:
 - freedesktop-sdk.bst:components/perl.bst
diff --git a/elements/core-deps/phodav.bst b/elements/core-deps/phodav.bst
index 3dbb5f9aa..4c43b61d7 100644
--- a/elements/core-deps/phodav.bst
+++ b/elements/core-deps/phodav.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:phodav.git
   track: master
+  ref: v3.0-7-gde7dd2afbab8ac1f35b90e7dfd763c78959ca5de
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:components/perl-xml-parser.bst
diff --git a/elements/core-deps/plist.bst b/elements/core-deps/plist.bst
index 521811de5..e014325a6 100644
--- a/elements/core-deps/plist.bst
+++ b/elements/core-deps/plist.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:libimobiledevice/libplist/releases/download/2.2.0/libplist-2.2.0.tar.bz2
+  ref: 4a5517e5377ec421df84c586ba85bb4e1d26f11ad203d7d450a907c0156fbd9a
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/plymouth.bst b/elements/core-deps/plymouth.bst
index 395b3f046..66b2cbc8d 100644
--- a/elements/core-deps/plymouth.bst
+++ b/elements/core-deps/plymouth.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: freedesktop_software:plymouth/releases/plymouth-22.02.122.tar.xz
+  ref: 100551442221033ce868c447ad6c74d831d209c18ae232b98ae0207e34eadaeb
 
 depends:
 - sdk/gtk+-3.bst
diff --git a/elements/core-deps/power-profiles-daemon.bst b/elements/core-deps/power-profiles-daemon.bst
index 877f64e95..0b4924be0 100644
--- a/elements/core-deps/power-profiles-daemon.bst
+++ b/elements/core-deps/power-profiles-daemon.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: 
freedesktop_files:hadess/power-profiles-daemon/uploads/329f1ed3b068f6c59b8441f01a4e711a/power-profiles-daemon-0.8.1.tar.xz
+  ref: 091128f78c35d214cf6b38260b9a6008c1ad550b28558f241e2cb746a8be7157
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/ppp.bst b/elements/core-deps/ppp.bst
index b8a0e1784..500d31a39 100644
--- a/elements/core-deps/ppp.bst
+++ b/elements/core-deps/ppp.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: samba:ppp/ppp-2.4.9.tar.gz
+  ref: f938b35eccde533ea800b15a7445b2f1137da7f88e32a16898d02dee8adc058d
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/protobuf-c.bst b/elements/core-deps/protobuf-c.bst
index 5723a184a..bfeef83bf 100644
--- a/elements/core-deps/protobuf-c.bst
+++ b/elements/core-deps/protobuf-c.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:protobuf-c/protobuf-c/releases/download/v1.4.0/protobuf-c-1.4.0.tar.gz
+  ref: 26d98ee9bf18a6eba0d3f855ddec31dbe857667d269bc0b6017335572f85bbcb
 
 depends:
 - core-deps/protobuf.bst
diff --git a/elements/core-deps/protobuf.bst b/elements/core-deps/protobuf.bst
index cf52000a3..03c65ce31 100644
--- a/elements/core-deps/protobuf.bst
+++ b/elements/core-deps/protobuf.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:protocolbuffers/protobuf/releases/download/v21.2/protobuf-all-21.2.tar.gz
+  ref: 9ae699200f3a80c735f9dc3b20e46d447584266f4601403e8fe5b97005f204dd
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/core-deps/pyatspi.bst b/elements/core-deps/pyatspi.bst
index 9b8bae722..bc6fc3b68 100644
--- a/elements/core-deps/pyatspi.bst
+++ b/elements/core-deps/pyatspi.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:pyatspi2.git
   track: master
+  ref: PYATSPI_2_46_0-6-gd0fbc0f88aa47b6899ddbd326af9ceac96b04414
 build-depends:
 - freedesktop-sdk.bst:components/python3.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/pycups.bst b/elements/core-deps/pycups.bst
index 90cfe7738..7db331f95 100644
--- a/elements/core-deps/pycups.bst
+++ b/elements/core-deps/pycups.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: github_files:OpenPrinting/pycups/releases/download/v2.0.1/pycups-2.0.1.tar.gz
+  ref: 57434ce5f62548eb12949ca8217f066f4eeb21a5d6ab8b13471dce350e380c90
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/core-deps/python-pyparsing.bst b/elements/core-deps/python-pyparsing.bst
index 3e5e44e64..85f395855 100644
--- a/elements/core-deps/python-pyparsing.bst
+++ b/elements/core-deps/python-pyparsing.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:c1/47/dfc9c342c9842bbe0036c7f763d2d6686bcf5eb1808ba3e170afdb282210/pyparsing-2.4.7.tar.gz
+  ref: c203ec8783bf771a155b207279b9bccb8dea02d8f0c9e5f8ead507bc3246ecc1
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/core-deps/qemu.bst b/elements/core-deps/qemu.bst
index 07a3859c3..ef2a1aee9 100644
--- a/elements/core-deps/qemu.bst
+++ b/elements/core-deps/qemu.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://download.qemu.org/qemu-7.1.0.tar.xz
+  ref: a0634e536bded57cf38ec8a751adb124b89c776fe0846f21ab6c6728f1cbbbe6
 
 build-depends:
 - core-deps/spice-protocol.bst
diff --git a/elements/core-deps/rpcsvc-proto.bst b/elements/core-deps/rpcsvc-proto.bst
index 0dc1cec94..ecc2b9072 100644
--- a/elements/core-deps/rpcsvc-proto.bst
+++ b/elements/core-deps/rpcsvc-proto.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:thkukuk/rpcsvc-proto/archive/v1.4.2.tar.gz
+  ref: 9f309fa25507836b0c5de8a9d755c1428bde5554610bf92eb21e32078134aef5
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/samba.bst b/elements/core-deps/samba.bst
index c39d1d4b3..94a2efbe7 100644
--- a/elements/core-deps/samba.bst
+++ b/elements/core-deps/samba.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: samba:samba/stable/samba-4.16.4.tar.gz
+  ref: 9532f848fb125a17e4e5d98e1ae8b42f210ed4433835e815b97c5dde6dc4702f
 - kind: patch
   path: files/samba/fix-root-build.patch
 
diff --git a/elements/core-deps/sane-backends.bst b/elements/core-deps/sane-backends.bst
index 2b224c53f..808c6482a 100644
--- a/elements/core-deps/sane-backends.bst
+++ b/elements/core-deps/sane-backends.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: 
gitlab_files:sane-project/backends/uploads/104f09c07d35519cc8e72e604f11643f/sane-backends-1.0.32.tar.gz
+  ref: 3a28c237c0a72767086202379f6dc92dbb63ec08dfbab22312cba80e238bb114
 
 build-depends:
 - freedesktop-sdk.bst:components/python3.bst
diff --git a/elements/core-deps/slirp-helper.bst b/elements/core-deps/slirp-helper.bst
index de314cfe4..88809e951 100644
--- a/elements/core-deps/slirp-helper.bst
+++ b/elements/core-deps/slirp-helper.bst
@@ -13,7 +13,267 @@ depends:
 sources:
 - kind: tar
   url: crates:crates/libslirp/libslirp-4.3.0.crate
+  ref: 4c6f95366c6c3299af0cfe7852888ca4b0aed40eeb22ca2ff644bec799439455
 - kind: cargo
+  ref:
+  - name: ansi_term
+    version: 0.11.0
+    sha: ee49baf6cb617b853aa8d93bf420db2383fab46d314482ca2803b40d5fde979b
+  - name: atty
+    version: 0.2.14
+    sha: d9b39be18770d11421cdb1b9947a45dd3f37e93092cbf377614828a319d5fee8
+  - name: bitflags
+    version: 1.2.1
+    sha: cf1de2fe8c75bc145a2f577add951f8134889b4795d47466a54a5c846d691693
+  - name: block-buffer
+    version: 0.7.3
+    sha: c0940dc441f31689269e10ac70eb1002a3a1d3ad1390e030043662eb7fe4688b
+  - name: block-padding
+    version: 0.1.5
+    sha: fa79dedbb091f449f1f39e53edf88d5dbe95f895dae6135a8d7b881fb5af73f5
+  - name: byte-tools
+    version: 0.3.1
+    sha: e3b5ca7a04898ad4bcd41c90c5285445ff5b791899bb1b0abdd2a2aa791211d7
+  - name: byteorder
+    version: 1.3.4
+    sha: 08c48aae112d48ed9f069b33538ea9e3e90aa263cfa3d1c24309612b1f7472de
+  - name: cc
+    version: 1.0.61
+    sha: ed67cbde08356238e75fc4656be4749481eeffb09e19f320a25237d5221c985d
+  - name: cfg-if
+    version: 0.1.10
+    sha: 4785bdd1c96b2a846b2bd7cc02e86b6b3dbf14e7e53446c4f54c92a361040822
+  - name: clap
+    version: 2.33.3
+    sha: 37e58ac78573c40708d45522f0d80fa2f01cc4f9b4e2bf749807255454312002
+  - name: crypto-mac
+    version: 0.7.0
+    sha: 4434400df11d95d556bac068ddfedd482915eb18fe8bea89bc80b6e4b1c179e5
+  - name: derivative
+    version: 2.1.1
+    sha: cb582b60359da160a9477ee80f15c8d784c477e69c217ef2cdd4169c24ea380f
+  - name: digest
+    version: 0.8.1
+    sha: f3d0c8c8752312f9713efd397ff63acb9f85585afbf179282e720e7704954dd5
+  - name: enumflags2
+    version: 0.6.4
+    sha: 83c8d82922337cd23a15f88b70d8e4ef5f11da38dd7cdb55e84dd5de99695da0
+  - name: enumflags2_derive
+    version: 0.6.4
+    sha: 946ee94e3dbf58fdd324f9ce245c7b238d46a66f00e86a020b71996349e46cce
+  - name: error-chain
+    version: 0.12.4
+    sha: 2d2f06b9cac1506ece98fe3231e3cc9c4410ec3d5b1f24ae1c8946f0742cdefc
+  - name: etherparse
+    version: 0.8.3
+    sha: 706c7cc3e05a64c496e9cca52ef8ad82a846a8c5b03345fddd81a76009a435b7
+  - name: fake-simd
+    version: 0.1.2
+    sha: e88a8acf291dafb59c2d96e8f59828f3838bb1a70398823ade51a84de6a6deed
+  - name: fastrand
+    version: 1.4.0
+    sha: ca5faf057445ce5c9d4329e382b2ce7ca38550ef3b73a5348362d5f24e0c7fe3
+  - name: fuchsia-zircon
+    version: 0.3.3
+    sha: 2e9763c69ebaae630ba35f74888db465e49e259ba1bc0eda7d06f4a067615d82
+  - name: fuchsia-zircon-sys
+    version: 0.3.3
+    sha: 3dcaa9ae7725d12cdb85b3ad99a434db70b468c09ded17e012d86b5c1010f7a7
+  - name: generic-array
+    version: 0.12.3
+    sha: c68f0274ae0e023facc3c97b2e00f076be70e254bc851d972503b328db79b2ec
+  - name: heck
+    version: 0.3.1
+    sha: 20564e78d53d2bb135c343b3f47714a56af2061f1c928fdb541dc7b9fdd94205
+  - name: hermit-abi
+    version: 0.1.17
+    sha: 5aca5565f760fb5b220e499d72710ed156fdb74e631659e99377d9ebfbd13ae8
+  - name: hmac
+    version: 0.7.1
+    sha: 5dcb5e64cda4c23119ab41ba960d1e170a774c8e4b9d9e6a9bc18aabf5e59695
+  - name: idna
+    version: 0.2.0
+    sha: 02e2673c30ee86b5b96a9cb52ad15718aa1f966f5ab9ad54a8b95d5ca33120a9
+  - name: instant
+    version: 0.1.7
+    sha: 63312a18f7ea8760cdd0a7c5aac1a619752a246b833545e3e36d1f81f7cd9e66
+  - name: iovec
+    version: 0.1.4
+    sha: b2b3ea6ff95e175473f8ffe6a7eb7c00d054240321b84c57051175fe3c1e075e
+  - name: ipnetwork
+    version: 0.17.0
+    sha: 02c3eaab3ac0ede60ffa41add21970a7df7d91772c03383aac6c2c3d53cc716b
+  - name: kernel32-sys
+    version: 0.2.2
+    sha: 7507624b29483431c0ba2d82aece8ca6cdba9382bff4ddd0f7490560c056098d
+  - name: lazy_static
+    version: 1.4.0
+    sha: e2abad23fbc42b3700f2f279844dc832adb2b2eb069b2df918f455c4e18cc646
+  - name: lazycell
+    version: 1.3.0
+    sha: 830d08ce1d1d941e6b30645f1a0eb5643013d835ce3779a5fc208261dbe10f55
+  - name: libc
+    version: 0.2.79
+    sha: 2448f6066e80e3bfc792e9c98bf705b4b0fc6e8ef5b43e5889aff0eaa9c58743
+  - name: libslirp-sys
+    version: 4.2.0
+    sha: 26e54a5719a79bee3b25ee15e4b2cf80f51597b2d45d9889f3c1b8c150d907b4
+  - name: libsystemd
+    version: 0.2.1
+    sha: f3a64961e79726a5b05e0db592097ca895831d755484203578fe75b580847262
+  - name: log
+    version: 0.4.11
+    sha: 4fabed175da42fed1fa0746b0ea71f412aa9d35e76e95e59b192c64b9dc2bf8b
+  - name: matches
+    version: 0.1.8
+    sha: 7ffc5c5338469d4d3ea17d269fa8ea3512ad247247c30bd2df69e68309ed0a08
+  - name: mio
+    version: 0.6.22
+    sha: fce347092656428bc8eaf6201042cb551b8d67855af7374542a92a0fbfcac430
+  - name: mio-extras
+    version: 2.0.6
+    sha: 52403fe290012ce777c4626790c8951324a2b9e3316b3143779c72b029742f19
+  - name: miow
+    version: 0.2.1
+    sha: 8c1f2f3b1cf331de6896aabf6e9d55dca90356cc9960cca7eaaf408a355ae919
+  - name: net2
+    version: 0.2.35
+    sha: 3ebc3ec692ed7c9a255596c67808dee269f64655d8baf7b4f0638e51ba1d6853
+  - name: nix
+    version: 0.17.0
+    sha: 50e4785f2c3b7589a0d0c1dd60285e1188adac4006e8abd6dd578e1567027363
+  - name: once_cell
+    version: 1.4.1
+    sha: 260e51e7efe62b592207e9e13a68e43692a7a279171d6ba57abd208bf23645ad
+  - name: opaque-debug
+    version: 0.2.3
+    sha: 2839e79665f131bdb5782e51f2c6c9599c133c6098982a54c794358bf432529c
+  - name: percent-encoding
+    version: 2.1.0
+    sha: d4fd5641d01c8f18a23da7b6fe29298ff4b55afcccdf78973b24cf3175fee32e
+  - name: pkg-config
+    version: 0.3.19
+    sha: 3831453b3449ceb48b6d9c7ad7c96d5ea673e9b470a1dc578c2ce6521230884c
+  - name: proc-macro-crate
+    version: 0.1.5
+    sha: 1d6ea3c4595b96363c13943497db34af4460fb474a95c43f4446ad341b8c9785
+  - name: proc-macro-error
+    version: 1.0.4
+    sha: da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c
+  - name: proc-macro-error-attr
+    version: 1.0.4
+    sha: a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869
+  - name: proc-macro2
+    version: 1.0.24
+    sha: 1e0704ee1a7e00d7bb417d0770ea303c1bccbabf0ef1667dae92b5967f5f8a71
+  - name: quote
+    version: 1.0.7
+    sha: aa563d17ecb180e500da1cfd2b028310ac758de548efdd203e18f283af693f37
+  - name: scoped-tls
+    version: 1.0.0
+    sha: ea6a9290e3c9cf0f18145ef7ffa62d68ee0bf5fcd651017e586dc7fd5da448c2
+  - name: serde
+    version: 1.0.117
+    sha: b88fa983de7720629c9387e9f517353ed404164b1e482c970a90c1a4aaf7dc1a
+  - name: serde_derive
+    version: 1.0.117
+    sha: cbd1ae72adb44aab48f325a02444a5fc079349a8d804c1fc922aed3f7454c74e
+  - name: serde_repr
+    version: 0.1.6
+    sha: 2dc6b7951b17b051f3210b063f12cc17320e2fe30ae05b0fe2a3abb068551c76
+  - name: sha2
+    version: 0.8.2
+    sha: a256f46ea78a0c0d9ff00077504903ac881a1dafdc20da66545699e7776b3e69
+  - name: slab
+    version: 0.4.2
+    sha: c111b5bd5695e56cffe5129854aa230b39c93a305372fdbb2668ca2394eea9f8
+  - name: strsim
+    version: 0.8.0
+    sha: 8ea5119cdb4c55b55d432abb513a0429384878c15dde60cc77b1c99de1a95a6a
+  - name: structopt
+    version: 0.3.20
+    sha: 126d630294ec449fae0b16f964e35bf3c74f940da9dca17ee9b905f7b3112eb8
+  - name: structopt-derive
+    version: 0.4.13
+    sha: 65e51c492f9e23a220534971ff5afc14037289de430e3c83f9daf6a1b6ae91e8
+  - name: subtle
+    version: 1.0.0
+    sha: 2d67a5a62ba6e01cb2192ff309324cb4875d0c451d55fe2319433abe7a05a8ee
+  - name: syn
+    version: 1.0.45
+    sha: ea9c5432ff16d6152371f808fb5a871cd67368171b09bb21b43df8e4a47a3556
+  - name: textwrap
+    version: 0.11.0
+    sha: d326610f408c7a4eb6f51c37c330e496b08506c9457c9d34287ecc38809fb060
+  - name: tinyvec
+    version: 0.3.4
+    sha: 238ce071d267c5710f9d31451efec16c5ee22de34df17cc05e56cbc92e967117
+  - name: toml
+    version: 0.5.7
+    sha: 75cf45bb0bef80604d001caaec0d09da99611b3c0fd39d3080468875cdb65645
+  - name: typenum
+    version: 1.12.0
+    sha: 373c8a200f9e67a0c95e62a4f52fbf80c23b4381c05a17845531982fa99e6b33
+  - name: unicode-bidi
+    version: 0.3.4
+    sha: 49f2bd0c6468a8230e1db229cff8029217cf623c767ea5d60bfbd42729ea54d5
+  - name: unicode-normalization
+    version: 0.1.13
+    sha: 6fb19cf769fa8c6a80a162df694621ebeb4dafb606470b2b2fce0be40a98a977
+  - name: unicode-segmentation
+    version: 1.6.0
+    sha: e83e153d1053cbb5a118eeff7fd5be06ed99153f00dbcd8ae310c5fb2b22edc0
+  - name: unicode-width
+    version: 0.1.8
+    sha: 9337591893a19b88d8d87f2cec1e73fad5cdfd10e5a6f349f498ad6ea2ffb1e3
+  - name: unicode-xid
+    version: 0.2.1
+    sha: f7fe0bb3479651439c9112f72b6c505038574c9fbb575ed1bf3b797fa39dd564
+  - name: url
+    version: 2.1.1
+    sha: 829d4a8476c35c9bf0bbce5a3b23f4106f79728039b726d292bb93bc106787cb
+  - name: uuid
+    version: 0.8.1
+    sha: 9fde2f6a4bea1d6e007c4ad38c6839fa71cbb63b6dbf5b595aa38dc9b1093c11
+  - name: vec_map
+    version: 0.8.2
+    sha: f1bddf1187be692e79c5ffeab891132dfb0f236ed36a43c7ed39f1165ee20191
+  - name: version_check
+    version: 0.9.2
+    sha: b5a972e5669d67ba988ce3dc826706fb0a8b01471c088cb0b6110b805cc36aed
+  - name: void
+    version: 1.0.2
+    sha: 6a02e4885ed3bc0f2de90ea6dd45ebcbb66dacffe03547fadbb0eeae2770887d
+  - name: winapi
+    version: 0.2.8
+    sha: 167dc9d6949a9b857f3451275e911c3f44255842c1f7a76f33c55103a909087a
+  - name: winapi
+    version: 0.3.9
+    sha: 5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419
+  - name: winapi-build
+    version: 0.1.1
+    sha: 2d315eee3b34aca4797b2da6b13ed88266e6d612562a0c46390af8299fc699bc
+  - name: winapi-i686-pc-windows-gnu
+    version: 0.4.0
+    sha: ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6
+  - name: winapi-x86_64-pc-windows-gnu
+    version: 0.4.0
+    sha: 712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f
+  - name: ws2_32-sys
+    version: 0.2.1
+    sha: d59cefebd0c892fa2dd6de581e937301d8552cb44489cdff035c6187cb63fa5e
+  - name: zbus
+    version: 1.2.1
+    sha: 3a8a1a98eac87778308d7b2725cee6543a13936a3913b98e37fcf8ce9e4362da
+  - name: zbus_macros
+    version: 1.2.1
+    sha: 9ca4d050be67f3b7a29878a6f0788a8dcd100c7297e619dcb91051f94679a8a4
+  - name: zvariant
+    version: 2.2.0
+    sha: fb79b31a454101beda19e64082dfd9ad59c5ff8afa41e1de1065333105b02740
+  - name: zvariant_derive
+    version: 2.2.0
+    sha: 605bf414a59d93a3d55055e72ea066c5c0bc578ed2227df15c407207b1c780ef
 - kind: patch
   path: files/slirp-helper/nix-riscv.patch
 
diff --git a/elements/core-deps/sofia-sip.bst b/elements/core-deps/sofia-sip.bst
index 0fa58f926..62a93dee9 100644
--- a/elements/core-deps/sofia-sip.bst
+++ b/elements/core-deps/sofia-sip.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:freeswitch/sofia-sip/archive/refs/tags/v1.13.4.tar.gz
+  ref: 3f3f7b7b26cc150dae7e1cae95a0fe2c65905311fe143145b4bcda8f97d7ed4e
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/speech-dispatcher.bst b/elements/core-deps/speech-dispatcher.bst
index 323c4f9eb..ee5108635 100644
--- a/elements/core-deps/speech-dispatcher.bst
+++ b/elements/core-deps/speech-dispatcher.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:brailcom/speechd/releases/download/0.11.0/speech-dispatcher-0.11.0.tar.gz
+  ref: 254c4279c7637ee815c9daee99597d208681f811af5188051f0c2e11f2ec77c7
 
 build-depends:
 - freedesktop-sdk.bst:components/texinfo.bst
diff --git a/elements/core-deps/spice-gtk.bst b/elements/core-deps/spice-gtk.bst
index 160ecab7f..594e1b34b 100644
--- a/elements/core-deps/spice-gtk.bst
+++ b/elements/core-deps/spice-gtk.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: spice:gtk/spice-gtk-0.41.tar.xz
+  ref: d8f8b5cbea9184702eeb8cc276a67d72acdb6e36e7c73349fb8445e5bca0969f
 
 build-depends:
 - core-deps/python-pyparsing.bst
diff --git a/elements/core-deps/spice-protocol.bst b/elements/core-deps/spice-protocol.bst
index a0c3efa3c..bbd2a6bf5 100644
--- a/elements/core-deps/spice-protocol.bst
+++ b/elements/core-deps/spice-protocol.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: spice:releases/spice-protocol-0.14.4.tar.xz
+  ref: 04ffba610d9fd441cfc47dfaa135d70096e60b1046d2119d8db2f8ea0d17d912
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core-deps/spice.bst b/elements/core-deps/spice.bst
index cbc755ea9..e876f2644 100644
--- a/elements/core-deps/spice.bst
+++ b/elements/core-deps/spice.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: spice:releases/spice-server/spice-0.15.0.tar.bz2
+  ref: b320cf8f4bd2852750acb703c15b72856027e5a8554f8217dfbb3cc09deba0f5
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 - core-deps/spice-protocol.bst
diff --git a/elements/core-deps/startup-notification.bst b/elements/core-deps/startup-notification.bst
index 1f3c396cb..ebdbf3b17 100644
--- a/elements/core-deps/startup-notification.bst
+++ b/elements/core-deps/startup-notification.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:startup-notification/0.12/startup-notification-0.12.tar.xz
+  ref: 4bd1363a2f3b3eb2c4f7fc33b4977bb9c12b4741206f05109b0ff2b3b30b6bc0
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core-deps/system-config-printer.bst b/elements/core-deps/system-config-printer.bst
index 8a425b4ee..e59f3defd 100644
--- a/elements/core-deps/system-config-printer.bst
+++ b/elements/core-deps/system-config-printer.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: 
github_files:OpenPrinting/system-config-printer/releases/download/v1.5.15/system-config-printer-1.5.15.tar.xz
+  ref: fbd226ce215bf014213dded81b43b9d4d90470524f5bf7cd21ecc71d4aefa689
 
 build-depends:
 - core-deps/intltool.bst
diff --git a/elements/core-deps/template-glib.bst b/elements/core-deps/template-glib.bst
index 12c900350..228a9891b 100644
--- a/elements/core-deps/template-glib.bst
+++ b/elements/core-deps/template-glib.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:template-glib.git
   track: main
+  ref: 3.36.0-1-g7948219221a8489c1dfd273b35cb6d3c7aa9a1b5
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/totem-pl-parser.bst b/elements/core-deps/totem-pl-parser.bst
index 5ccc161b5..64b9d6b31 100644
--- a/elements/core-deps/totem-pl-parser.bst
+++ b/elements/core-deps/totem-pl-parser.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:totem-pl-parser.git
   track: master
+  ref: V_3_26_6-18-gf73f8b446ce249e9c6e795194b8108bed8d4dd3c
 build-depends:
 - sdk/gobject-introspection.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/tracker-miners.bst b/elements/core-deps/tracker-miners.bst
index 99c394ec3..cfa287ef2 100644
--- a/elements/core-deps/tracker-miners.bst
+++ b/elements/core-deps/tracker-miners.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:tracker-miners.git
   track: master
+  ref: 3.4.0-22-gc0ef393e8231b419fe11aa84d1fa92ff0c753cdd
 build-depends:
 - freedesktop-sdk.bst:components/asciidoc.bst
 - freedesktop-sdk.bst:components/docbook-xsl.bst
diff --git a/elements/core-deps/udisks2.bst b/elements/core-deps/udisks2.bst
index c5cb78ff1..7fa0e943c 100644
--- a/elements/core-deps/udisks2.bst
+++ b/elements/core-deps/udisks2.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:storaged-project/udisks/releases/download/udisks-2.9.2/udisks-2.9.2.tar.bz2
+  ref: bda6f9d7edc632c57e55862731a8ffeff2413fa4346708a22bf31ed72b0fe058
 
 build-depends:
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/uhttpmock.bst b/elements/core-deps/uhttpmock.bst
index 93304d73d..bf2889c6c 100644
--- a/elements/core-deps/uhttpmock.bst
+++ b/elements/core-deps/uhttpmock.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tecnocode:uhttpmock/uhttpmock-0.5.3.tar.xz
+  ref: 90843223c3a30bdb7f1eb3442373a03fee425af85a9df289cd687698ccff112f
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/upower.bst b/elements/core-deps/upower.bst
index 6ce6ca3ba..1142ec355 100644
--- a/elements/core-deps/upower.bst
+++ b/elements/core-deps/upower.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: freedesktop:upower/upower/-/archive/v1.90.0/upower-v1.90.0.tar.bz2
+  ref: eafa0a367dc0417390984eeb81e9d1a2b449999ba6ad20ed39bf270d0b4e5e77
 
 build-depends:
 - sdk/gtk-doc.bst
diff --git a/elements/core-deps/usbredir.bst b/elements/core-deps/usbredir.bst
index f8a9fb94a..045c8cfb7 100644
--- a/elements/core-deps/usbredir.bst
+++ b/elements/core-deps/usbredir.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: spice:usbredir/usbredir-0.13.0.tar.xz
+  ref: 4ba6faa02c0ae6deeb4c53883d66ab54b3a5899bead42ce4ded9568b9a7dc46e
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 - core-deps/spice-protocol.bst
diff --git a/elements/core-deps/virglrenderer.bst b/elements/core-deps/virglrenderer.bst
index 369a3551c..0ba98f628 100644
--- a/elements/core-deps/virglrenderer.bst
+++ b/elements/core-deps/virglrenderer.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: 
freedesktop:virgl/virglrenderer/-/archive/virglrenderer-0.9.1/virglrenderer-virglrenderer-0.9.1.tar.bz2
+  ref: 860cc3f0f1a448542a812b6e13909824eb3140b7b3283d068e9640487d50e6c0
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/vte.bst b/elements/core-deps/vte.bst
index b6636f8fc..1ab293d59 100644
--- a/elements/core-deps/vte.bst
+++ b/elements/core-deps/vte.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:vte.git
   track: master
+  ref: 0.69.90-35-g8ef3f6b2f8043d28cbc82520eb094f09333b26ae
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/core-deps/webp-pixbuf-loader.bst b/elements/core-deps/webp-pixbuf-loader.bst
index 069321488..a06d44a65 100644
--- a/elements/core-deps/webp-pixbuf-loader.bst
+++ b/elements/core-deps/webp-pixbuf-loader.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: github_files:aruiz/webp-pixbuf-loader/archive/refs/tags/0.0.6.tar.gz
+  ref: 451cb6924a9aa6afaa21d5b63b402dcfcfe952a1873e078b17078c4a1964a693
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/xdg-desktop-portal-gnome.bst b/elements/core-deps/xdg-desktop-portal-gnome.bst
index ddc33135f..09f451ef5 100644
--- a/elements/core-deps/xdg-desktop-portal-gnome.bst
+++ b/elements/core-deps/xdg-desktop-portal-gnome.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:xdg-desktop-portal-gnome.git
   track: main
+  ref: 43.0-6-gdfd50c8c664afcec5183711f1f11305908cdd778
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core-deps/xdg-desktop-portal-gtk.bst b/elements/core-deps/xdg-desktop-portal-gtk.bst
index 8cfd636ce..7b11e10c0 100644
--- a/elements/core-deps/xdg-desktop-portal-gtk.bst
+++ b/elements/core-deps/xdg-desktop-portal-gtk.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: 
github_files:flatpak/xdg-desktop-portal-gtk/releases/download/1.10.0/xdg-desktop-portal-gtk-1.10.0.tar.xz
+  ref: c809757bb5cb5d067a99be373b36a05578e0f710c1d69aad7222e98d4db38b5a
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/xdg-sound-theme.bst b/elements/core-deps/xdg-sound-theme.bst
index 623b657c4..5cb58b91e 100644
--- a/elements/core-deps/xdg-sound-theme.bst
+++ b/elements/core-deps/xdg-sound-theme.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: freedesktop:xdg/xdg-sound-theme/-/archive/0.8/xdg-sound-theme-0.8.tar.bz2
+  ref: 0fabaa8fd86d2887380590a3f6e305a3dde5c41783dcae9a6ba67122d51b55f9
 
 build-depends:
 - core-deps/intltool.bst
diff --git a/elements/core-deps/xmlb.bst b/elements/core-deps/xmlb.bst
index dc41400c7..673f16756 100644
--- a/elements/core-deps/xmlb.bst
+++ b/elements/core-deps/xmlb.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: github_files:hughsie/libxmlb/archive/refs/tags/0.3.7.tar.gz
+  ref: fc00cdb2af69eb4a53bf6a48874c9004ee5373579eafa1dc4e53dace8b9d1251
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core/baobab.bst b/elements/core/baobab.bst
index b1584da07..7e3f1e031 100644
--- a/elements/core/baobab.bst
+++ b/elements/core/baobab.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:baobab.git
   track: main
+  ref: 43.0-7-gd1b9b7faa90aad632c07850717a1a5dba582d036
 build-depends:
 - sdk/appstream-glib.bst
 - sdk/vala.bst
diff --git a/elements/core/calls.bst b/elements/core/calls.bst
index b72573fa9..55be64b6a 100644
--- a/elements/core/calls.bst
+++ b/elements/core/calls.bst
@@ -8,6 +8,7 @@ sources:
     subprojects/libcall-ui:
       checkout: true
       url: gnome_gitlab:World/Phosh/libcall-ui.git
+  ref: v43.0-11-g6da2924d30cc3f67f0d8ad7d25256f576fc027c3
 
 build-depends:
 - sdk/vala.bst
diff --git a/elements/core/cheese.bst b/elements/core/cheese.bst
index dce159ea9..435eb78d8 100644
--- a/elements/core/cheese.bst
+++ b/elements/core/cheese.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:cheese.git
   track: master
+  ref: 43.alpha-8-g1de47dbc95db445e31fdc674ea4208f53699f81a
 
 build-depends:
 - sdk/appstream-glib.bst
diff --git a/elements/core/d-spy.bst b/elements/core/d-spy.bst
index d86a4200c..eed105cc1 100644
--- a/elements/core/d-spy.bst
+++ b/elements/core/d-spy.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:d-spy.git
   track: main
+  ref: 1.4.0-1-g8463083b8bc22b0534a423c934151044638483e4
 
 build-depends:
 - freedesktop-sdk.bst:components/desktop-file-utils.bst
diff --git a/elements/core/dconf-editor.bst b/elements/core/dconf-editor.bst
index 48fd16868..4cd53a970 100644
--- a/elements/core/dconf-editor.bst
+++ b/elements/core/dconf-editor.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:dconf-editor.git
   track: master
+  ref: 43.0-3-g77a84fe8fc63e7c3b0d56f727a2127e853913a9f
 
 build-depends:
 - sdk/appstream-glib.bst
diff --git a/elements/core/devhelp.bst b/elements/core/devhelp.bst
index b6621a4a0..e14c94ab4 100644
--- a/elements/core/devhelp.bst
+++ b/elements/core/devhelp.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:devhelp.git
   track: main
+  ref: 43.0-2-ga52ea7ab208ca470f39b4b8271552de9f85e7f20
 
 build-depends:
 - sdk/appstream-glib.bst
diff --git a/elements/core/eog.bst b/elements/core/eog.bst
index f8cd85cb1..f60f54a46 100644
--- a/elements/core/eog.bst
+++ b/elements/core/eog.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:eog.git
   track: master
+  ref: 43.0-8-g4eb36ffcf946fbf8487a6c0646271e6cb8371571
 
 build-depends:
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/core/epiphany.bst b/elements/core/epiphany.bst
index 6a1e69e77..206329050 100644
--- a/elements/core/epiphany.bst
+++ b/elements/core/epiphany.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:epiphany.git
   track: master
+  ref: 43.0-15-g39b4252e8dbfd1e8309a4a6c9deb342281ae98bb
 
 build-depends:
 - sdk/appstream-glib.bst
diff --git a/elements/core/evince.bst b/elements/core/evince.bst
index 4dc7b3958..ac26f95eb 100644
--- a/elements/core/evince.bst
+++ b/elements/core/evince.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:evince.git
   track: main
+  ref: 43.0-5-ge5d8a2b1780016f44931c582c08023dd1a8d38c0
 
 build-depends:
 - sdk/appstream-glib.bst
diff --git a/elements/core/gdm.bst b/elements/core/gdm.bst
index f6ab2cd33..52e2dc3c2 100644
--- a/elements/core/gdm.bst
+++ b/elements/core/gdm.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gdm.git
   track: main
+  ref: 43.0-21-g9c5a46cba4ee219eea2b61ffeb80c95ad66e3989
 - kind: local
   path: files/gdm
   directory: gdm-config
diff --git a/elements/core/gnome-backgrounds.bst b/elements/core/gnome-backgrounds.bst
index 39e90f772..2829d572a 100644
--- a/elements/core/gnome-backgrounds.bst
+++ b/elements/core/gnome-backgrounds.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-backgrounds.git
   track: main
+  ref: 43-0-g3dc06f83fda4169432a43443cfa1617bbbd4810b
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-bluetooth.bst b/elements/core/gnome-bluetooth.bst
index d9aeb72e8..4006033bd 100644
--- a/elements/core/gnome-bluetooth.bst
+++ b/elements/core/gnome-bluetooth.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-bluetooth.git
   track: master
+  ref: 42.4-3-gb213b48becf79a2c4ab4bc85afcf598b86699daf
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core/gnome-boxes.bst b/elements/core/gnome-boxes.bst
index 28c80941e..0a82aca84 100644
--- a/elements/core/gnome-boxes.bst
+++ b/elements/core/gnome-boxes.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-boxes.git
   track: main
+  ref: 43.0-13-g7fe6ec960b42dd2c8f60a7a1460816c028bda919
   submodules:
     subprojects/libovf-glib:
       checkout: true
diff --git a/elements/core/gnome-builder.bst b/elements/core/gnome-builder.bst
index 0e9f35dd3..4987a5ae4 100644
--- a/elements/core/gnome-builder.bst
+++ b/elements/core/gnome-builder.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-builder.git
   track: main
+  ref: 43.alpha1-925-g6e53e2db10c93a8ef6e718b47408e3a6f0885577
 
 build-depends:
 - freedesktop-sdk.bst:components/desktop-file-utils.bst
diff --git a/elements/core/gnome-calculator.bst b/elements/core/gnome-calculator.bst
index 1a5669d8f..164925d8f 100644
--- a/elements/core/gnome-calculator.bst
+++ b/elements/core/gnome-calculator.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-calculator.git
   track: master
+  ref: 43.0.1-4-g6e9aab10ec94dd5a35e6ae017c517b561d9c27b6
 build-depends:
 - sdk/appstream-glib.bst
 - sdk/vala.bst
diff --git a/elements/core/gnome-calendar.bst b/elements/core/gnome-calendar.bst
index 1a48ccecf..a2c7506e7 100644
--- a/elements/core/gnome-calendar.bst
+++ b/elements/core/gnome-calendar.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-calendar.git
   track: main
+  ref: 43.0-19-g2cf58a75d4269db801f798f93ca17414914c65db
 
 build-depends:
 - sdk/appstream-glib.bst
diff --git a/elements/core/gnome-characters.bst b/elements/core/gnome-characters.bst
index 0554ea357..32b728a6c 100644
--- a/elements/core/gnome-characters.bst
+++ b/elements/core/gnome-characters.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-characters.git
   track: main
+  ref: 43.0-3-gb43ab6b5bd82f2377e19cfcdaca771441dbc6be0
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/core/gnome-clocks.bst b/elements/core/gnome-clocks.bst
index 5118dfdae..01b1942fc 100644
--- a/elements/core/gnome-clocks.bst
+++ b/elements/core/gnome-clocks.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-clocks.git
   track: master
+  ref: 43.0-4-g055a057944f9548da814ca92f2ef2beb3b23d297
 
 build-depends:
 - sdk/vala.bst
diff --git a/elements/core/gnome-color-manager.bst b/elements/core/gnome-color-manager.bst
index 5d97366f9..ae90fbfad 100644
--- a/elements/core/gnome-color-manager.bst
+++ b/elements/core/gnome-color-manager.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-color-manager.git
   track: master
+  ref: GNOME_COLOR_MANAGER_3_36_0-40-g5e01bb571bac1f0870c0f2475066affd8db2698a
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/core/gnome-connections.bst b/elements/core/gnome-connections.bst
index b08ec13fc..d35b76b0a 100644
--- a/elements/core/gnome-connections.bst
+++ b/elements/core/gnome-connections.bst
@@ -8,6 +8,7 @@ sources:
     subprojects/gtk-frdp:
       checkout: true
       url: gnome:gtk-frdp.git
+  ref: 43.0-4-gb4550a5273763b99b55a9c95057ea2546bed5d9d
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core/gnome-console.bst b/elements/core/gnome-console.bst
index ff159400e..b1f118f11 100644
--- a/elements/core/gnome-console.bst
+++ b/elements/core/gnome-console.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:console.git
   track: main
+  ref: 43.0-5-g7ae8ca86bce673295726d706f25fd515744771c1
 
 build-depends:
 - freedesktop-sdk.bst:components/desktop-file-utils.bst
diff --git a/elements/core/gnome-contacts.bst b/elements/core/gnome-contacts.bst
index fea895ca3..460883abe 100644
--- a/elements/core/gnome-contacts.bst
+++ b/elements/core/gnome-contacts.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-contacts.git
   track: main
+  ref: 43.0-3-gc77bd582b5f59b204d3c739a8caab6b7f3c837f8
 
 build-depends:
 - sdk/vala.bst
diff --git a/elements/core/gnome-control-center.bst b/elements/core/gnome-control-center.bst
index c0463a8fa..1c5fb7220 100644
--- a/elements/core/gnome-control-center.bst
+++ b/elements/core/gnome-control-center.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-control-center.git
   track: main
+  ref: 43.0-26-gc6bc8979ed5573a3d5950c78c3e955cbe16eaab1
   submodules:
     subprojects/gvc:
       checkout: true
diff --git a/elements/core/gnome-desktop.bst b/elements/core/gnome-desktop.bst
index 49fa13992..bbe99e183 100644
--- a/elements/core/gnome-desktop.bst
+++ b/elements/core/gnome-desktop.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-desktop.git
   track: master
+  ref: 43-2-gc564dd8ad6b37238cd67fa7fb62ad8ed5ba3bad2
 
 build-depends:
 - sdk/gobject-introspection.bst
@@ -25,4 +26,4 @@ depends:
 variables:
   meson-local: >-
     -Dgtk_doc=true
-    -Dinstalled_tests=true
\ No newline at end of file
+    -Dinstalled_tests=true
diff --git a/elements/core/gnome-disk-utility.bst b/elements/core/gnome-disk-utility.bst
index dd65e18e7..89e4b6266 100644
--- a/elements/core/gnome-disk-utility.bst
+++ b/elements/core/gnome-disk-utility.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-disk-utility.git
   track: master
+  ref: 43.0-4-gef48867498bc1c77377fc0eddaaa36d45dfcb7ba
 
 build-depends:
 - sdk/appstream-glib.bst
diff --git a/elements/core/gnome-font-viewer.bst b/elements/core/gnome-font-viewer.bst
index cbff0d617..204b11d71 100644
--- a/elements/core/gnome-font-viewer.bst
+++ b/elements/core/gnome-font-viewer.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-font-viewer.git
   track: main
+  ref: 43.0-3-g8bb3febaf1706d9e48e132670cbac16ba34950a0
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-initial-setup.bst b/elements/core/gnome-initial-setup.bst
index 5b7bbb681..82649d384 100644
--- a/elements/core/gnome-initial-setup.bst
+++ b/elements/core/gnome-initial-setup.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-initial-setup.git
   track: master
+  ref: 43.0-21-g730885ad137f9d71292412a2b09cc40d9e3c85cc
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-keyring.bst b/elements/core/gnome-keyring.bst
index 024135929..68b63d6b8 100644
--- a/elements/core/gnome-keyring.bst
+++ b/elements/core/gnome-keyring.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-keyring.git
   track: master
+  ref: 42.0-15-g96b31dec1fc7c1079afbbdcf1917f67d69331518
 build-depends:
 - freedesktop-sdk.bst:components/docbook-xsl.bst
 - freedesktop-sdk.bst:components/libxslt.bst
diff --git a/elements/core/gnome-logs.bst b/elements/core/gnome-logs.bst
index 8ab85f07b..9317e89b8 100644
--- a/elements/core/gnome-logs.bst
+++ b/elements/core/gnome-logs.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-logs.git
   track: master
+  ref: gnome-logs-43.0-2-g766c0e482eaea9850ba40d47f1f0c12e6fafd1b1
 
 build-depends:
 - sdk/appstream-glib.bst
diff --git a/elements/core/gnome-maps.bst b/elements/core/gnome-maps.bst
index 38d4a0e1c..55734bb1e 100644
--- a/elements/core/gnome-maps.bst
+++ b/elements/core/gnome-maps.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-maps.git
   track: main
+  ref: v43.0-21-gef96185ba82de6318dd8c3f824e6fe129ad4e02a
 build-depends:
 - freedesktop-sdk.bst:components/desktop-file-utils.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-menus.bst b/elements/core/gnome-menus.bst
index 9bc7cb094..7307f8069 100644
--- a/elements/core/gnome-menus.bst
+++ b/elements/core/gnome-menus.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-menus.git
   track: master
+  ref: 3.36.0-13-ge173f0aa4ab2806df1b78ea9826d1c33f0f28fec
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core/gnome-music.bst b/elements/core/gnome-music.bst
index b03bb6947..6871a9f01 100644
--- a/elements/core/gnome-music.bst
+++ b/elements/core/gnome-music.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-music.git
   track: master
+  ref: 42.1-75-gf27dc91c2eee0d66ffc39e5b0c8e8bfd52bee84c
   submodules:
     subprojects/gfm:
       checkout: true
diff --git a/elements/core/gnome-photos.bst b/elements/core/gnome-photos.bst
index 2d3b669fd..c370a133e 100644
--- a/elements/core/gnome-photos.bst
+++ b/elements/core/gnome-photos.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-photos.git
   track: master
+  ref: 43.0-1-g1a7930e64610d7840c8da08cb7a891a08fe1a89a
   submodules:
     subprojects/libgd:
       checkout: true
diff --git a/elements/core/gnome-remote-desktop.bst b/elements/core/gnome-remote-desktop.bst
index 7792a816e..5c04d7a59 100644
--- a/elements/core/gnome-remote-desktop.bst
+++ b/elements/core/gnome-remote-desktop.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-remote-desktop.git
   track: master
+  ref: 43.0-5-g7c23a7fb48e4872fdb992c8019bcc77befcd5fb0
 
 build-depends:
 - core-deps/nv-codec-headers.bst
diff --git a/elements/core/gnome-session.bst b/elements/core/gnome-session.bst
index bb51d21cf..5c95547b8 100644
--- a/elements/core/gnome-session.bst
+++ b/elements/core/gnome-session.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-session.git
   track: main
+  ref: 43.0-0-g620a5befb2cf04ba098f3f339ab040c9aecdc11d
 
 build-depends:
 - freedesktop-sdk.bst:components/docbook-xsl.bst
diff --git a/elements/core/gnome-settings-daemon.bst b/elements/core/gnome-settings-daemon.bst
index 43e9332cd..069a6831b 100644
--- a/elements/core/gnome-settings-daemon.bst
+++ b/elements/core/gnome-settings-daemon.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-settings-daemon.git
   track: master
+  ref: 43.0-7-g7176d38d0fcf2e24f4081cc77a944f8dd7209573
   submodules:
     subprojects/gvc:
       checkout: true
diff --git a/elements/core/gnome-shell-extensions.bst b/elements/core/gnome-shell-extensions.bst
index 6f32f10c7..5ee1cbda5 100644
--- a/elements/core/gnome-shell-extensions.bst
+++ b/elements/core/gnome-shell-extensions.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-shell-extensions.git
   track: main
+  ref: 43.0-1-g77b35dcda3f5cc929b41eb85a29b50aa7405ad17
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/core/gnome-shell.bst b/elements/core/gnome-shell.bst
index 636fcd8cc..0e233eba0 100644
--- a/elements/core/gnome-shell.bst
+++ b/elements/core/gnome-shell.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-shell.git
   track: main
+  ref: 43.0-23-gf5c29de5809e39004a716ad514ae290e0e045fa1
   submodules:
     subprojects/gvc:
       checkout: true
diff --git a/elements/core/gnome-software.bst b/elements/core/gnome-software.bst
index aa41ef7c5..93d8cfd16 100644
--- a/elements/core/gnome-software.bst
+++ b/elements/core/gnome-software.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-software.git
   track: main
+  ref: 43.0-48-g088163c6faba4fc20c1ef03f09a087cd4cd006c5
   submodules:
     subprojects/gnome-pwa-list:
       checkout: true
diff --git a/elements/core/gnome-system-monitor.bst b/elements/core/gnome-system-monitor.bst
index a649e3787..f34ba5fec 100644
--- a/elements/core/gnome-system-monitor.bst
+++ b/elements/core/gnome-system-monitor.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-system-monitor.git
   track: master
+  ref: 42.0-31-g99c8d8110a932ac720be4f0cf9ebfa5c06913cfa
 build-depends:
 - freedesktop-sdk.bst:components/itstool.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-text-editor.bst b/elements/core/gnome-text-editor.bst
index b8c5838ab..1cdb5b17c 100644
--- a/elements/core/gnome-text-editor.bst
+++ b/elements/core/gnome-text-editor.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-text-editor.git
   track: main
+  ref: 43.0-20-gcf59acc65d82ae87b4bcf4b3d9dae5ea3aa729f4
 
 build-depends:
 - freedesktop-sdk.bst:components/desktop-file-utils.bst
diff --git a/elements/core/gnome-tour.bst b/elements/core/gnome-tour.bst
index c1533e8b9..6d49b2bcb 100644
--- a/elements/core/gnome-tour.bst
+++ b/elements/core/gnome-tour.bst
@@ -4,7 +4,282 @@ sources:
 - kind: git_tag
   url: gnome:gnome-tour.git
   track: master
+  ref: 43.0-0-g61ae394c1d303817735c4e612f84c3397031d30a
 - kind: cargo
+  ref:
+  - name: aho-corasick
+    version: 0.7.19
+    sha: b4f55bd91a0978cbfd91c457a164bab8b4001c833b7f323132c0a4e1922dd44e
+  - name: anyhow
+    version: 1.0.65
+    sha: 98161a4e3e2184da77bb14f02184cdd111e83bbbcc9979dfee3c44b9a85f5602
+  - name: atty
+    version: 0.2.14
+    sha: d9b39be18770d11421cdb1b9947a45dd3f37e93092cbf377614828a319d5fee8
+  - name: autocfg
+    version: 1.1.0
+    sha: d468802bab17cbc0cc575e9b053f41e72aa36bfa6b7f55e3529ffa43161b97fa
+  - name: bitflags
+    version: 1.3.2
+    sha: bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a
+  - name: block
+    version: 0.1.6
+    sha: 0d8c1fef690941d3e7788d328517591fecc684c084084702d6ff1641e993699a
+  - name: cairo-rs
+    version: 0.15.12
+    sha: c76ee391b03d35510d9fa917357c7f1855bd9a6659c95a1b392e33f49b3369bc
+  - name: cairo-sys-rs
+    version: 0.15.1
+    sha: 3c55d429bef56ac9172d25fecb85dc8068307d17acd74b377866b7a1ef25d3c8
+  - name: cc
+    version: 1.0.73
+    sha: 2fff2a6927b3bb87f9595d67196a70493f627687a71d87a0d692242c33f58c11
+  - name: cfg-expr
+    version: 0.10.3
+    sha: 0aacacf4d96c24b2ad6eb8ee6df040e4f27b0d0b39a5710c30091baa830485db
+  - name: cfg-if
+    version: 1.0.0
+    sha: baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd
+  - name: env_logger
+    version: 0.7.1
+    sha: 44533bbbb3bb3c1fa17d9f2e4e38bbbaf8396ba82193c4cb1b6445d711445d36
+  - name: field-offset
+    version: 0.3.4
+    sha: 1e1c54951450cbd39f3dbcf1005ac413b49487dabf18a720ad2383eccfeffb92
+  - name: futures-channel
+    version: 0.3.24
+    sha: 30bdd20c28fadd505d0fd6712cdfcb0d4b5648baf45faef7f852afb2399bb050
+  - name: futures-core
+    version: 0.3.24
+    sha: 4e5aa3de05362c3fb88de6531e6296e85cde7739cccad4b9dfeeb7f6ebce56bf
+  - name: futures-executor
+    version: 0.3.24
+    sha: 9ff63c23854bee61b6e9cd331d523909f238fc7636290b96826e9cfa5faa00ab
+  - name: futures-io
+    version: 0.3.24
+    sha: bbf4d2a7a308fd4578637c0b17c7e1c7ba127b8f6ba00b29f717e9655d85eb68
+  - name: futures-task
+    version: 0.3.24
+    sha: a6508c467c73851293f390476d4491cf4d227dbabcd4170f3bb6044959b294f1
+  - name: futures-util
+    version: 0.3.24
+    sha: 44fb6cb1be61cc1d2e43b262516aafcf63b241cffdb1d3fa115f91d9c7b09c90
+  - name: gdk-pixbuf
+    version: 0.15.11
+    sha: ad38dd9cc8b099cceecdf41375bb6d481b1b5a7cd5cd603e10a69a9383f8619a
+  - name: gdk-pixbuf-sys
+    version: 0.15.10
+    sha: 140b2f5378256527150350a8346dbdb08fadc13453a7a2d73aecd5fab3c402a7
+  - name: gdk4
+    version: 0.4.8
+    sha: 4fabb7cf843c26b085a5d68abb95d0c0bf27a9ae2eeff9c4adb503a1eb580876
+  - name: gdk4-sys
+    version: 0.4.8
+    sha: efe7dcb44f5c00aeabff3f69abfc5673de46559070f89bd3fbb7b66485d9cef2
+  - name: gettext-rs
+    version: 0.7.0
+    sha: e49ea8a8fad198aaa1f9655a2524b64b70eb06b2f3ff37da407566c93054f364
+  - name: gettext-sys
+    version: 0.21.3
+    sha: c63ce2e00f56a206778276704bbe38564c8695249fdc8f354b4ef71c57c3839d
+  - name: gio
+    version: 0.15.12
+    sha: 68fdbc90312d462781a395f7a16d96a2b379bb6ef8cd6310a2df272771c4283b
+  - name: gio-sys
+    version: 0.15.10
+    sha: 32157a475271e2c4a023382e9cab31c4584ee30a97da41d3c4e9fdd605abcf8d
+  - name: glib
+    version: 0.15.12
+    sha: edb0306fbad0ab5428b0ca674a23893db909a98582969c9b537be4ced78c505d
+  - name: glib-macros
+    version: 0.15.11
+    sha: 25a68131a662b04931e71891fb14aaf65ee4b44d08e8abc10f49e77418c86c64
+  - name: glib-sys
+    version: 0.15.10
+    sha: ef4b192f8e65e9cf76cbf4ea71fa8e3be4a0e18ffe3d68b8da6836974cc5bad4
+  - name: gobject-sys
+    version: 0.15.10
+    sha: 0d57ce44246becd17153bd035ab4d32cfee096a657fc01f2231c9278378d1e0a
+  - name: graphene-rs
+    version: 0.15.1
+    sha: 7c54f9fbbeefdb62c99f892dfca35f83991e2cb5b46a8dc2a715e58612f85570
+  - name: graphene-sys
+    version: 0.15.10
+    sha: fa691fc7337ba1df599afb55c3bcb85c04f1b3f17362570e9bb0ff0d1bc3028a
+  - name: gsk4
+    version: 0.4.8
+    sha: 05e9020d333280b3aa38d496495bfa9b50712eebf1ad63f0ec5bcddb5eb61be4
+  - name: gsk4-sys
+    version: 0.4.8
+    sha: 7add39ccf60078508c838643a2dcc91f045c46ed63b5ea6ab701b2e25bda3fea
+  - name: gtk4
+    version: 0.4.8
+    sha: c64f0c2a3d80e899dc3febddad5bac193ffcf74a0fd7e31037f30dd34d6f7396
+  - name: gtk4-macros
+    version: 0.4.8
+    sha: fafbcc920af4eb677d7d164853e7040b9de5a22379c596f570190c675d45f7a7
+  - name: gtk4-sys
+    version: 0.4.8
+    sha: 5bc8006eea634b7c72da3ff79e24606e45f21b3b832a3c5a1f543f5f97eb0f63
+  - name: heck
+    version: 0.4.0
+    sha: 2540771e65fc8cb83cd6e8a237f70c319bd5c29f78ed1084ba5d50eeac86f7f9
+  - name: hermit-abi
+    version: 0.1.19
+    sha: 62b467343b94ba476dcb2500d242dadbb39557df889310ac77c5d99100aaac33
+  - name: humantime
+    version: 1.3.0
+    sha: df004cfca50ef23c36850aaaa59ad52cc70d0e90243c3c7737a4dd32dc7a3c4f
+  - name: lazy_static
+    version: 1.4.0
+    sha: e2abad23fbc42b3700f2f279844dc832adb2b2eb069b2df918f455c4e18cc646
+  - name: libadwaita
+    version: 0.1.1
+    sha: f2ae453d28e3b91f03749f02b1531e8cfe315a1d0762b77a61797d2ab80bb87d
+  - name: libadwaita-sys
+    version: 0.1.0
+    sha: f18b6ac4cadd252a89f5cba0a5a4e99836131795d6fad37b859ac79e8cb7d2c8
+  - name: libc
+    version: 0.2.133
+    sha: c0f80d65747a3e43d1596c7c5492d95d5edddaabd45a7fcdb02b95f644164966
+  - name: locale_config
+    version: 0.3.0
+    sha: 08d2c35b16f4483f6c26f0e4e9550717a2f6575bcd6f12a53ff0c490a94a6934
+  - name: log
+    version: 0.4.17
+    sha: abb12e687cfb44aa40f41fc3978ef76448f9b6038cad6aef4259d3c095a2382e
+  - name: malloc_buf
+    version: 0.0.6
+    sha: 62bb907fe88d54d8d9ce32a3cceab4218ed2f6b7d35617cafe9adf84e43919cb
+  - name: memchr
+    version: 2.5.0
+    sha: 2dffe52ecf27772e601905b7522cb4ef790d2cc203488bbd0e2fe85fcb74566d
+  - name: memoffset
+    version: 0.6.5
+    sha: 5aa361d4faea93603064a027415f07bd8e1d5c88c9fbf68bf56a285428fd79ce
+  - name: objc
+    version: 0.2.7
+    sha: 915b1b472bc21c53464d6c8461c9d3af805ba1ef837e1cac254428f4a77177b1
+  - name: objc-foundation
+    version: 0.1.1
+    sha: 1add1b659e36c9607c7aab864a76c7a4c2760cd0cd2e120f3fb8b952c7e22bf9
+  - name: objc_id
+    version: 0.1.1
+    sha: c92d4ddb4bd7b50d730c215ff871754d0da6b2178849f8a2a2ab69712d0c073b
+  - name: once_cell
+    version: 1.14.0
+    sha: 2f7254b99e31cad77da24b08ebf628882739a608578bb1bcdfc1f9c21260d7c0
+  - name: pango
+    version: 0.15.10
+    sha: 22e4045548659aee5313bde6c582b0d83a627b7904dd20dc2d9ef0895d414e4f
+  - name: pango-sys
+    version: 0.15.10
+    sha: d2a00081cde4661982ed91d80ef437c20eacaf6aa1a5962c0279ae194662c3aa
+  - name: pest
+    version: 2.3.1
+    sha: cb779fcf4bb850fbbb0edc96ff6cf34fd90c4b1a112ce042653280d9a7364048
+  - name: pin-project-lite
+    version: 0.2.9
+    sha: e0a7ae3ac2f1173085d398531c705756c94a4c56843785df85a60c1a0afac116
+  - name: pin-utils
+    version: 0.1.0
+    sha: 8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184
+  - name: pkg-config
+    version: 0.3.25
+    sha: 1df8c4ec4b0627e53bdf214615ad287367e482558cf84b109250b37464dc03ae
+  - name: pretty_env_logger
+    version: 0.4.0
+    sha: 926d36b9553851b8b0005f1275891b392ee4d2d833852c417ed025477350fb9d
+  - name: proc-macro-crate
+    version: 1.2.1
+    sha: eda0fc3b0fb7c975631757e14d9049da17374063edb6ebbcbc54d880d4fe94e9
+  - name: proc-macro-error
+    version: 1.0.4
+    sha: da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c
+  - name: proc-macro-error-attr
+    version: 1.0.4
+    sha: a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869
+  - name: proc-macro2
+    version: 1.0.43
+    sha: 0a2ca2c61bc9f3d74d2886294ab7b9853abd9c1ad903a3ac7815c58989bb7bab
+  - name: quick-error
+    version: 1.2.3
+    sha: a1d01941d82fa2ab50be1e79e6714289dd7cde78eba4c074bc5a4374f650dfe0
+  - name: quick-xml
+    version: 0.22.0
+    sha: 8533f14c8382aaad0d592c812ac3b826162128b65662331e1127b45c3d18536b
+  - name: quote
+    version: 1.0.21
+    sha: bbe448f377a7d6961e30f5955f9b8d106c3f5e449d493ee1b125c1d43c2b5179
+  - name: regex
+    version: 1.6.0
+    sha: 4c4eb3267174b8c6c2f654116623910a0fef09c4753f8dd83db29c48a0df988b
+  - name: regex-syntax
+    version: 0.6.27
+    sha: a3f87b73ce11b1619a3c6332f45341e0047173771e8b8b73f87bfeefb7b56244
+  - name: rustc_version
+    version: 0.3.3
+    sha: f0dfe2087c51c460008730de8b57e6a320782fbfb312e1f4d520e6c6fae155ee
+  - name: semver
+    version: 0.11.0
+    sha: f301af10236f6df4160f7c3f04eec6dbc70ace82d23326abad5edee88801c6b6
+  - name: semver-parser
+    version: 0.10.2
+    sha: 00b0bef5b7f9e0df16536d3961cfb6e84331c065b4066afb39768d0e319411f7
+  - name: serde
+    version: 1.0.144
+    sha: 0f747710de3dcd43b88c9168773254e809d8ddbdf9653b84e2554ab219f17860
+  - name: slab
+    version: 0.4.7
+    sha: 4614a76b2a8be0058caa9dbbaf66d988527d86d003c11a94fbd335d7661edcef
+  - name: smallvec
+    version: 1.9.0
+    sha: 2fd0db749597d91ff862fd1d55ea87f7855a744a8425a64695b6fca237d1dad1
+  - name: syn
+    version: 1.0.100
+    sha: 52205623b1b0f064a4e71182c3b18ae902267282930c6d5462c91b859668426e
+  - name: system-deps
+    version: 6.0.2
+    sha: a1a45a1c4c9015217e12347f2a411b57ce2c4fc543913b14b6fe40483328e709
+  - name: temp-dir
+    version: 0.1.11
+    sha: af547b166dd1ea4b472165569fc456cfb6818116f854690b0ff205e636523dab
+  - name: termcolor
+    version: 1.1.3
+    sha: bab24d30b911b2376f3a13cc2cd443142f0c81dda04c118693e35b3835757755
+  - name: thiserror
+    version: 1.0.35
+    sha: c53f98874615aea268107765aa1ed8f6116782501d18e53d08b471733bea6c85
+  - name: thiserror-impl
+    version: 1.0.35
+    sha: f8b463991b4eab2d801e724172285ec4195c650e8ec79b149e6c2a8e6dd3f783
+  - name: toml
+    version: 0.5.9
+    sha: 8d82e1a7758622a465f8cee077614c73484dac5b836c02ff6a40d5d1010324d7
+  - name: ucd-trie
+    version: 0.1.5
+    sha: 9e79c4d996edb816c91e4308506774452e55e95c3c9de07b6729e17e15a5ef81
+  - name: unicode-ident
+    version: 1.0.4
+    sha: dcc811dc4066ac62f84f11307873c4850cb653bfa9b1719cee2bd2204a4bc5dd
+  - name: version-compare
+    version: 0.1.0
+    sha: fe88247b92c1df6b6de80ddc290f3976dbdf2f5f5d3fd049a9fb598c6dd5ca73
+  - name: version_check
+    version: 0.9.4
+    sha: 49874b5167b65d7193b8aba1567f5c7d93d001cafc34600cee003eda787e483f
+  - name: winapi
+    version: 0.3.9
+    sha: 5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419
+  - name: winapi-i686-pc-windows-gnu
+    version: 0.4.0
+    sha: ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6
+  - name: winapi-util
+    version: 0.1.5
+    sha: 70ec6ce85bb158151cae5e5c87f95a8e97d2c0c4b001223f33a334e3ce5de178
+  - name: winapi-x86_64-pc-windows-gnu
+    version: 0.4.0
+    sha: 712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f
 
 build-depends:
 - freedesktop-sdk.bst:components/desktop-file-utils.bst
diff --git a/elements/core/gnome-user-docs.bst b/elements/core/gnome-user-docs.bst
index 8e7882f1e..14d0039f8 100644
--- a/elements/core/gnome-user-docs.bst
+++ b/elements/core/gnome-user-docs.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-user-docs.git
   track: master
+  ref: 43.0-6-g46c1d5e39bd06c3e36b286255df6719a031bad1d
 build-depends:
 - sdk/yelp-tools.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/core/gnome-user-share.bst b/elements/core/gnome-user-share.bst
index 39998f9e5..1523a07e2 100644
--- a/elements/core/gnome-user-share.bst
+++ b/elements/core/gnome-user-share.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-user-share.git
   track: master
+  ref: 43.0-2-g6d644849bc68512ec4dda46094ad0ddf1bc2a042
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-weather.bst b/elements/core/gnome-weather.bst
index 3ec089a90..e0fb5d19e 100644
--- a/elements/core/gnome-weather.bst
+++ b/elements/core/gnome-weather.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gnome-weather.git
   track: main
+  ref: 43.0-4-geb44a0473b2b0ea1f2eb07ae04b1ebff8adcc867
 build-depends:
 - sdk/appstream-glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core/mutter.bst b/elements/core/mutter.bst
index 41dbd85ab..7f136d667 100644
--- a/elements/core/mutter.bst
+++ b/elements/core/mutter.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:mutter.git
   track: main
+  ref: 43.0-49-g327b47171d3be9b4a14f4fd186ab2b2ccb0df273
 
 build-depends:
 # Need the whole thing over just the capture for the dbus interface.
diff --git a/elements/core/nautilus.bst b/elements/core/nautilus.bst
index e3bc66f02..701ec3687 100644
--- a/elements/core/nautilus.bst
+++ b/elements/core/nautilus.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:nautilus.git
   track: master
+  ref: 43.0-10-gf7b06ed6b512993fd2b63c07534a1faf477efd2e
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/core/orca.bst b/elements/core/orca.bst
index 9fe924ce4..084ad0e38 100644
--- a/elements/core/orca.bst
+++ b/elements/core/orca.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:orca.git
   track: master
+  ref: ORCA_43_0-2-g5f638f361c30f554a8af335b6c4461559d1a8ec6
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/core/rygel.bst b/elements/core/rygel.bst
index fb582677c..cf47beeb3 100644
--- a/elements/core/rygel.bst
+++ b/elements/core/rygel.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:rygel.git
   track: master
+  ref: rygel-0.42.0-2-g342d98893e1f49b63f74e05be745d1ff2f2a9b7e
 
 build-depends:
 - sdk/vala.bst
diff --git a/elements/core/simple-scan.bst b/elements/core/simple-scan.bst
index 66d40c926..baa7bbacd 100644
--- a/elements/core/simple-scan.bst
+++ b/elements/core/simple-scan.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:simple-scan.git
   track: master
+  ref: 42.5-25-g19f5f8c7e68c4fed2b1e8bf569666227421a71d1
 build-depends:
 - sdk/vala.bst
 - freedesktop-sdk.bst:components/itstool.bst
diff --git a/elements/core/sushi.bst b/elements/core/sushi.bst
index 43e767117..1c160738a 100644
--- a/elements/core/sushi.bst
+++ b/elements/core/sushi.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:sushi.git
   track: master
+  ref: 43.0-2-g10dd5e62924f13bdd69855ae2a599017914e7035
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/core/sysprof.inc b/elements/core/sysprof.inc
index 9c995f77b..b1344c4e1 100644
--- a/elements/core/sysprof.inc
+++ b/elements/core/sysprof.inc
@@ -2,3 +2,4 @@ sources:
 - kind: git_tag
   url: gnome:sysprof.git
   track: master
+  ref: 3.46.0-3-gceab63f6941c4a8c131189b579387ccc9cd8a891
diff --git a/elements/core/totem.bst b/elements/core/totem.bst
index e44ce4a93..71521d0dc 100644
--- a/elements/core/totem.bst
+++ b/elements/core/totem.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:totem.git
   track: master
+  ref: 43.0-8-g35f1413f7ff1e92f85377d21794e570053fbed79
   submodules:
     subprojects/libgd:
       checkout: true
diff --git a/elements/custom/atinout.bst b/elements/custom/atinout.bst
index 68db9560e..0cd75776a 100644
--- a/elements/custom/atinout.bst
+++ b/elements/custom/atinout.bst
@@ -4,6 +4,7 @@ kind: make
 sources:
 - kind: tar
   url: https://sourceforge.net/projects/atinout/files/v0.9.1/atinout-0.9.1.tar.gz/download
+  ref: 4d15c8288aca414e11cd304686b172696104c5e42bf776300311c005634854a2
 - kind: patch
   path: files/atinout/0001-make-gcc-happy-by-adding-fallthrough-comment.patch
 - kind: patch
diff --git a/elements/custom/eg25-manager.bst b/elements/custom/eg25-manager.bst
index 9422f930f..fcd1cd7d9 100644
--- a/elements/custom/eg25-manager.bst
+++ b/elements/custom/eg25-manager.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git
   url: https://gitlab.com/mobian1/eg25-manager.git
   track: 0.4.4
+  ref: f53ba5c5bae2d882b6ba5cd378fd55beadd29d14
 build-depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/custom/iw.bst b/elements/custom/iw.bst
index 42fc31b95..2abe3bb79 100644
--- a/elements/custom/iw.bst
+++ b/elements/custom/iw.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git
   url: https://git.sipsolutions.net/iw.git
   track: v5.19
+  ref: c2a322113d5b4320ce39823d96dce8ac527a397a
 build-depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
 - freedesktop-sdk.bst:components/pkg-config.bst
diff --git a/elements/custom/libgpiod.bst b/elements/custom/libgpiod.bst
index d262fe3d0..712391481 100644
--- a/elements/custom/libgpiod.bst
+++ b/elements/custom/libgpiod.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git
   url: https://git.kernel.org/pub/scm/libs/libgpiod/libgpiod.git
   track: v1.6.3
+  ref: dfc5d361e6748d5f48b706e5c4ac949d133b5470
 build-depends:
 - freedesktop-sdk.bst:bootstrap-import.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/freedesktop-sdk.bst b/elements/freedesktop-sdk.bst
index 0d30a27f1..8d5469963 100644
--- a/elements/freedesktop-sdk.bst
+++ b/elements/freedesktop-sdk.bst
@@ -2,8 +2,9 @@ kind: junction
 sources:
 - kind: git_tag
   url: gitlab:freedesktop-sdk/freedesktop-sdk.git
-  track: master
+  track: release/22.08
   track-tags: true
+  ref: freedesktop-sdk-22.08.2.1-0-gde68b5af1dc9ae9656b1b6647ba035d27743bd77
 config:
   options:
     target_arch: '%{arch}'
diff --git a/elements/iso/eos-installer.bst b/elements/iso/eos-installer.bst
index 056daeefc..c478f6845 100644
--- a/elements/iso/eos-installer.bst
+++ b/elements/iso/eos-installer.bst
@@ -9,6 +9,7 @@ sources:
   url: github:endlessm/eos-installer.git
   track-tags: true
   track: Release_4.0.7
+  ref: Release_4.0.9-0-g3f384acc76f537675fa4d8817a5f49cf2e455f51
   submodules:
     ext/libglnx:
       url: gnome:libglnx.git
diff --git a/elements/iso/isomd5sum.bst b/elements/iso/isomd5sum.bst
index f5a839687..c5c2d3d49 100644
--- a/elements/iso/isomd5sum.bst
+++ b/elements/iso/isomd5sum.bst
@@ -3,6 +3,7 @@ kind: make
 sources:
 - kind: tar
   url: github_files:rhinstaller/isomd5sum/archive/1.2.3.tar.gz
+  ref: b0e706f470c336f689f43ddea33a85aed43fa7e5276221c7ac930e22f795c93c
 
 depends:
 - freedesktop-sdk.bst:components/popt.bst
diff --git a/elements/iso/libburn.bst b/elements/iso/libburn.bst
index 7a28a2ad7..26ed41bbc 100644
--- a/elements/iso/libburn.bst
+++ b/elements/iso/libburn.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: libburnia:libburn-1.5.4.tar.gz
+  ref: 525059d10759c5cb8148eebc863bb510e311c663603da7bd2d21c46b7cf63b54
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/iso/libisoburn.bst b/elements/iso/libisoburn.bst
index 80fec8df6..8bf7fb8e6 100644
--- a/elements/iso/libisoburn.bst
+++ b/elements/iso/libisoburn.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: libburnia:libisoburn-1.5.4.tar.gz
+  ref: 2d89846d43880f17fa591c53b3bea42ffb803628e4e630c680fc2c9184f79132
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/iso/libisofs.bst b/elements/iso/libisofs.bst
index 86197dd35..0ced0974a 100644
--- a/elements/iso/libisofs.bst
+++ b/elements/iso/libisofs.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: libburnia:libisofs-1.5.4.tar.gz
+  ref: aaa0ed80a7501979316f505b0b017f29cba0ea5463b751143bad2c360215a88e
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/sdk-deps/bubblewrap.bst b/elements/sdk-deps/bubblewrap.bst
index 8c2ca216f..0f5ab161a 100644
--- a/elements/sdk-deps/bubblewrap.bst
+++ b/elements/sdk-deps/bubblewrap.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:containers/bubblewrap/releases/download/v0.5.0/bubblewrap-0.5.0.tar.xz
+  ref: 16fdaf33799d63104e347e0133f909196fe90d0c50515d010bcb422eb5a00818
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/sdk-deps/gi-docgen.bst b/elements/sdk-deps/gi-docgen.bst
index 1178a17b6..e72fec686 100644
--- a/elements/sdk-deps/gi-docgen.bst
+++ b/elements/sdk-deps/gi-docgen.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gi-docgen.git
   track: main
+  ref: 2022.1-46-g045701a87e40059d15017d32bbd9cea4d21ec5bf
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk-deps/gvfs.bst b/elements/sdk-deps/gvfs.bst
index 45b31911a..affe27439 100644
--- a/elements/sdk-deps/gvfs.bst
+++ b/elements/sdk-deps/gvfs.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gvfs.git
   track: master
+  ref: 1.50.2-13-gbffe030a4ba638f46ab0dd608158171340b01e59
 
 build-depends:
 - freedesktop-sdk.bst:components/systemd.bst
diff --git a/elements/sdk-deps/ibus.bst b/elements/sdk-deps/ibus.bst
index 6ab6e97c5..0cc4e27e3 100644
--- a/elements/sdk-deps/ibus.bst
+++ b/elements/sdk-deps/ibus.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:ibus/ibus/releases/download/1.5.25/ibus-1.5.25.tar.gz
+  ref: dea4f663c485267cc3313e40a0bc89b977c397e19644f8ab41df0e6eaec34330
 
 build-depends:
 - sdk/vala.bst
diff --git a/elements/sdk-deps/libsass.bst b/elements/sdk-deps/libsass.bst
index df1716500..c890a78d0 100644
--- a/elements/sdk-deps/libsass.bst
+++ b/elements/sdk-deps/libsass.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:sass/libsass/archive/3.6.4.tar.gz
+  ref: f9484d9a6df60576e791566eab2f757a97fd414fce01dd41fc0a693ea5db2889
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/sdk-deps/python-smartypants.bst b/elements/sdk-deps/python-smartypants.bst
index b7818a00f..c1e933618 100644
--- a/elements/sdk-deps/python-smartypants.bst
+++ b/elements/sdk-deps/python-smartypants.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: github_files:leohemsted/smartypants.py/archive/refs/tags/v2.0.1.tar.gz
+  ref: b98191911ff3b4144ef8ad53e776a2d0ad24bd508a905c6ce523597c40022773
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/sdk-deps/python-typogrify.bst b/elements/sdk-deps/python-typogrify.bst
index ab33c1036..2e4a856bc 100644
--- a/elements/sdk-deps/python-typogrify.bst
+++ b/elements/sdk-deps/python-typogrify.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:8a/bf/64959d6187d42472acb846bcf462347c9124952c05bd57e5769d5f28f9a6/typogrify-2.0.7.tar.gz
+  ref: 8be4668cda434163ce229d87ca273a11922cb1614cb359970b7dc96eed13cb38
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/sdk-deps/sassc.bst b/elements/sdk-deps/sassc.bst
index c65cbe786..1f86ae681 100644
--- a/elements/sdk-deps/sassc.bst
+++ b/elements/sdk-deps/sassc.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:sass/sassc/archive/refs/tags/3.6.1.tar.gz
+  ref: 8cee391c49a102b4464f86fc40c4ceac3a2ada52a89c4c933d8348e3e4542a60
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/sdk-deps/xdg-dbus-proxy.bst b/elements/sdk-deps/xdg-dbus-proxy.bst
index 72b7a5ab3..c21104363 100644
--- a/elements/sdk-deps/xdg-dbus-proxy.bst
+++ b/elements/sdk-deps/xdg-dbus-proxy.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:flatpak/xdg-dbus-proxy/releases/download/0.1.2/xdg-dbus-proxy-0.1.2.tar.xz
+  ref: 1749d6f9f46dcc9edc87725641cf56cf91dcad1b01707891ea0850c1000c520f
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/sdk/adobe-source-code-pro-fonts.bst b/elements/sdk/adobe-source-code-pro-fonts.bst
index 9869a9305..e141ba846 100644
--- a/elements/sdk/adobe-source-code-pro-fonts.bst
+++ b/elements/sdk/adobe-source-code-pro-fonts.bst
@@ -18,6 +18,7 @@ config:
 sources:
 - kind: tar
   url: github_files:adobe-fonts/source-code-pro/archive/2.010R-ro/1.030R-it.tar.gz
+  ref: 3ee5a0d04e6586f12de038cb33ec963f137bbc4907ae1e10a6333478a2b884f8
 - kind: local
   path: files/font-conf/adobe-source-code-pro.conf
   directory: config
diff --git a/elements/sdk/adwaita-icon-theme.bst b/elements/sdk/adwaita-icon-theme.bst
index 890e07859..aec4a77bc 100644
--- a/elements/sdk/adwaita-icon-theme.bst
+++ b/elements/sdk/adwaita-icon-theme.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:adwaita-icon-theme.git
   track: master
+  ref: 43-0-g3ea65342a846b2b29fe6feedcd13e2ecc5b5c2b2
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/sdk/appstream-glib.bst b/elements/sdk/appstream-glib.bst
index 04e1069fa..c7d812f11 100644
--- a/elements/sdk/appstream-glib.bst
+++ b/elements/sdk/appstream-glib.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: freedesktop_people:~hughsient/appstream-glib/releases/appstream-glib-0.8.1.tar.xz
+  ref: 68a3d007f5b3aa84592dbef07950d9acf327da97ec8a6e88a90575d9055ddf6d
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/at-spi2-core.bst b/elements/sdk/at-spi2-core.bst
index a1e051779..e7c84f7bd 100644
--- a/elements/sdk/at-spi2-core.bst
+++ b/elements/sdk/at-spi2-core.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:at-spi2-core.git
   track: main
+  ref: AT_SPI2_CORE_2_46_0-12-gbe832c349bb5702e00f716f3813618ee2a43b469
 build-depends:
 - sdk-deps/gi-docgen.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/cantarell-fonts.bst b/elements/sdk/cantarell-fonts.bst
index 8c540c6e5..762281720 100644
--- a/elements/sdk/cantarell-fonts.bst
+++ b/elements/sdk/cantarell-fonts.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:cantarell-fonts/0.303/cantarell-fonts-0.303.1.tar.xz
+  ref: f9463a0659c63e57e381fdd753cf1929225395c5b49135989424761830530411
 build-depends:
 - sdk/appstream-glib.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk/enchant-2.bst b/elements/sdk/enchant-2.bst
index d0053f4d3..0c3e4776b 100644
--- a/elements/sdk/enchant-2.bst
+++ b/elements/sdk/enchant-2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:AbiWord/enchant/releases/download/v2.2.15/enchant-2.2.15.tar.gz
+  ref: 3b0f2215578115f28e2a6aa549b35128600394304bd79d6f28b0d3b3d6f46c03
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/sdk/fcitx5-gtk.bst b/elements/sdk/fcitx5-gtk.bst
index 4bdb3deb1..bd38816af 100644
--- a/elements/sdk/fcitx5-gtk.bst
+++ b/elements/sdk/fcitx5-gtk.bst
@@ -3,6 +3,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_files:fcitx/fcitx5-gtk/archive/5.0.14.tar.gz
+  ref: 5cf5bc7309c1559fa95552d2cfd6cfcee568c5691afa2bee125754bbcc9846be
 - kind: patch
   path: files/fcitx5-gtk/gio-unix.patch
 
diff --git a/elements/sdk/gcab.bst b/elements/sdk/gcab.bst
index 3f5ad5c5c..ba36c64af 100644
--- a/elements/sdk/gcab.bst
+++ b/elements/sdk/gcab.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gcab.git
   track: master
+  ref: v1.5-1-gad0baea50359c1978a9224ee60bf98d97bfb991f
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk-doc.bst
diff --git a/elements/sdk/gcr-3.bst b/elements/sdk/gcr-3.bst
index f2466db61..626bab275 100644
--- a/elements/sdk/gcr-3.bst
+++ b/elements/sdk/gcr-3.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gcr.git
   track: gnome-41
+  ref: 3.41.1-1-g211133b9b2e1d2755cd84346bf3466d30d2449f4
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/sdk/gcr.bst b/elements/sdk/gcr.bst
index 3feccdf6d..8bcbcfb5e 100644
--- a/elements/sdk/gcr.bst
+++ b/elements/sdk/gcr.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gcr.git
   track: master
+  ref: 3.92.0-13-g381faa4a2a7e31d821b584c8f23067b3d9071fe1
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/sdk/gdk-pixbuf.bst b/elements/sdk/gdk-pixbuf.bst
index 62ba5cad5..ccac3c246 100644
--- a/elements/sdk/gdk-pixbuf.bst
+++ b/elements/sdk/gdk-pixbuf.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gdk-pixbuf.git
   track: master
+  ref: 2.42.9-8-g4855228178e9f766e5bc3e13557b5f32c5d1baac
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/geoclue.bst b/elements/sdk/geoclue.bst
index c4d0e9381..310d30463 100644
--- a/elements/sdk/geoclue.bst
+++ b/elements/sdk/geoclue.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: freedesktop_files:geoclue/geoclue/uploads/0e42403294a35949d2481da6514994f3/geoclue-2.6.0.tar.xz
+  ref: 2283effa8f9c40c3331dd9ae89d01011d17cbeae12b03e1b7579482d8ceb253e
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/gjs.bst b/elements/sdk/gjs.bst
index ef46c2f7a..d8fc50f7a 100644
--- a/elements/sdk/gjs.bst
+++ b/elements/sdk/gjs.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gjs.git
   track: master
+  ref: 1.74.0-0-gf4a4572c35a67eb38fef9243f2c34f37ee60d7ff
 
 build-depends:
 - sdk/sysprof-minimal.bst
diff --git a/elements/sdk/glib-networking.bst b/elements/sdk/glib-networking.bst
index 3afc6aa60..d1e1d12ac 100644
--- a/elements/sdk/glib-networking.bst
+++ b/elements/sdk/glib-networking.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:glib-networking.git
   track: master
+  ref: 2.74.rc-21-gde30f53d47170102cf5f9c239f9111dbdb1bc498
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 depends:
diff --git a/elements/sdk/glib.bst b/elements/sdk/glib.bst
index 50ae48357..c37e53227 100644
--- a/elements/sdk/glib.bst
+++ b/elements/sdk/glib.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:glib.git
   track: main
+  ref: 2.74.0-43-ge3c56a2f65e75cd013ff540384986e457633e92a
   submodules:
     subprojects/gvdb:
       checkout: true
diff --git a/elements/sdk/gobject-introspection.bst b/elements/sdk/gobject-introspection.bst
index d637b71de..135b2f778 100644
--- a/elements/sdk/gobject-introspection.bst
+++ b/elements/sdk/gobject-introspection.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gobject-introspection.git
   track: main
+  ref: 1.74.0-1-g10b94dd76c19c6052c699179c81554c50eaeb16e
 build-depends:
 - sdk/gtk-doc.bst
 - freedesktop-sdk.bst:components/bison.bst
diff --git a/elements/sdk/graphene.bst b/elements/sdk/graphene.bst
index 953bc80f8..4be9fa54f 100644
--- a/elements/sdk/graphene.bst
+++ b/elements/sdk/graphene.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: github:ebassi/graphene.git
   track: master
+  ref: 1.10.6-31-gac825971fd45cb932337fab36762c1317ff6c4be
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/gsettings-desktop-schemas.bst b/elements/sdk/gsettings-desktop-schemas.bst
index b7155e554..ea8ea6139 100644
--- a/elements/sdk/gsettings-desktop-schemas.bst
+++ b/elements/sdk/gsettings-desktop-schemas.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gsettings-desktop-schemas.git
   track: master
+  ref: 43.0-5-g65a68fb32de466dd0667f61e9e65e6aec877c25b
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/gssproxy.bst b/elements/sdk/gssproxy.bst
index eccf76c0f..5da6d456a 100644
--- a/elements/sdk/gssproxy.bst
+++ b/elements/sdk/gssproxy.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:gssapi/gssproxy/releases/download/v0.9.1/gssproxy-0.9.1.tar.gz
+  ref: ebc355c1495db96e3591574f32b9464fcfbf73381ce8fcb397cdede220167dc4
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/sdk/gtk+-3.bst b/elements/sdk/gtk+-3.bst
index 5efd9536b..fcfdc8bbe 100644
--- a/elements/sdk/gtk+-3.bst
+++ b/elements/sdk/gtk+-3.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gtk.git
   track: gtk-3-24
+  ref: 3.24.34-168-g293cee17248d9774d9114942afc6a953a6df88d6
 - kind: patch
   path: files/gtk3-werror.patch
 
diff --git a/elements/sdk/gtk-doc.bst b/elements/sdk/gtk-doc.bst
index 38be2d699..56c9cc992 100644
--- a/elements/sdk/gtk-doc.bst
+++ b/elements/sdk/gtk-doc.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:gtk-doc.git
   track: master
+  ref: 1.33.2-23-g9ff2e441f2626bbdf47f0cb38a5f2c19bd30c420
 build-depends:
 - freedesktop-sdk.bst:components/itstool.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk/gtk.bst b/elements/sdk/gtk.bst
index ce89c28e1..3cf2912c7 100644
--- a/elements/sdk/gtk.bst
+++ b/elements/sdk/gtk.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gtk.git
   track: main
+  ref: 4.8.1-129-g3867f9b8ea195b755c250a9573b5a6906c31c525
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/sdk/gtksourceview-4.bst b/elements/sdk/gtksourceview-4.bst
index dd7f6dcfd..239cb6112 100644
--- a/elements/sdk/gtksourceview-4.bst
+++ b/elements/sdk/gtksourceview-4.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gtksourceview.git
   track: 'gtksourceview-4-8'
+  ref: 4.8.3-17-g71e5c4aa40b55c80b2aef3685f9d2d8dbdf07822
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/gtksourceview.bst b/elements/sdk/gtksourceview.bst
index f3437593f..0bc3a6f04 100644
--- a/elements/sdk/gtksourceview.bst
+++ b/elements/sdk/gtksourceview.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:gtksourceview.git
   track: master
+  ref: 5.6.1-5-gbf978b825c224df144af03d86b34e52d604056f8
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/sdk/json-glib.bst b/elements/sdk/json-glib.bst
index 380ca6b86..7e216d04a 100644
--- a/elements/sdk/json-glib.bst
+++ b/elements/sdk/json-glib.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:json-glib.git
   track: master
+  ref: 1.6.6-25-gaaee26ac0be80bf952b4cd9ffd72218f24f83bed
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk-deps/gi-docgen.bst
diff --git a/elements/sdk/krb5.bst b/elements/sdk/krb5.bst
index ff6ff85e1..b9f045d3c 100644
--- a/elements/sdk/krb5.bst
+++ b/elements/sdk/krb5.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: kerberos:dist/krb5/1.20/krb5-1.20.tar.gz
+  ref: 7e022bdd3c851830173f9faaa006a230a0e0fdad4c953e85bff4bf0da036e12f
 
 build-depends:
 - freedesktop-sdk.bst:components/bison.bst
diff --git a/elements/sdk/libadwaita.bst b/elements/sdk/libadwaita.bst
index b12d40edc..0e09e3fed 100644
--- a/elements/sdk/libadwaita.bst
+++ b/elements/sdk/libadwaita.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:libadwaita.git
   track: main
+  ref: 1.2.0-36-g0e9ed16d6a70c9b602091201fd9ea0edab107b32
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/sdk/libgee.bst b/elements/sdk/libgee.bst
index 997127f98..6b457f3eb 100644
--- a/elements/sdk/libgee.bst
+++ b/elements/sdk/libgee.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:libgee.git
   track: main
+  ref: 0.20.6-0-g7d332f82c750ba72a6c625f38e4bfd44b786a926
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk/vala.bst
diff --git a/elements/sdk/libhandy.bst b/elements/sdk/libhandy.bst
index 20b1b6924..b5ae1f8d1 100644
--- a/elements/sdk/libhandy.bst
+++ b/elements/sdk/libhandy.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:libhandy.git
   track: main
+  ref: 1.8.0-5-gc4734bb05a2c122ae56e98750536c30cd6aabcd5
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/sdk/libmanette.bst b/elements/sdk/libmanette.bst
index c1acfe703..81cd65e5e 100644
--- a/elements/sdk/libmanette.bst
+++ b/elements/sdk/libmanette.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:libmanette.git
   track: master
+  ref: 0.2.6-3-g003c2e84d95357bbbef72fb395ef85f1650097a3
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/libnotify.bst b/elements/sdk/libnotify.bst
index f7537eb02..63f8ff1f9 100644
--- a/elements/sdk/libnotify.bst
+++ b/elements/sdk/libnotify.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:libnotify.git
   track: master
+  ref: 0.8.1-1-g80121a3b8c0118535545a9e37cbe4d877b1388a3
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/librsvg.bst b/elements/sdk/librsvg.bst
index 50f64b467..3dda677e1 100644
--- a/elements/sdk/librsvg.bst
+++ b/elements/sdk/librsvg.bst
@@ -4,7 +4,816 @@ sources:
 - kind: git_tag
   url: gnome:librsvg.git
   track: main
+  ref: 2.55.0-267-ge9f6b7dfcde2ce59e0d163b44766ddb03eddb72f
 - kind: cargo
+  ref:
+  - name: adler
+    version: 1.0.2
+    sha: f26201604c87b1e01bd3d98f8d5d9a8fcbb815e8cedb41ffccbeb4bf593a35fe
+  - name: aho-corasick
+    version: 0.7.19
+    sha: b4f55bd91a0978cbfd91c457a164bab8b4001c833b7f323132c0a4e1922dd44e
+  - name: android_system_properties
+    version: 0.1.5
+    sha: 819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311
+  - name: anyhow
+    version: 1.0.65
+    sha: 98161a4e3e2184da77bb14f02184cdd111e83bbbcc9979dfee3c44b9a85f5602
+  - name: approx
+    version: 0.5.1
+    sha: cab112f0a86d568ea0e627cc1d6be74a1e9cd55214684db5561995f6dad897c6
+  - name: assert_cmd
+    version: 2.0.4
+    sha: 93ae1ddd39efd67689deb1979d80bad3bf7f2b09c6e6117c8d1f2443b5e2f83e
+  - name: atty
+    version: 0.2.14
+    sha: d9b39be18770d11421cdb1b9947a45dd3f37e93092cbf377614828a319d5fee8
+  - name: autocfg
+    version: 1.1.0
+    sha: d468802bab17cbc0cc575e9b053f41e72aa36bfa6b7f55e3529ffa43161b97fa
+  - name: base-x
+    version: 0.2.11
+    sha: 4cbbc9d0964165b47557570cce6c952866c2678457aca742aafc9fb771d30270
+  - name: bit-set
+    version: 0.5.3
+    sha: 0700ddab506f33b20a03b13996eccd309a48e5ff77d0d95926aa0210fb4e95f1
+  - name: bit-vec
+    version: 0.6.3
+    sha: 349f9b6a179ed607305526ca489b34ad0a41aed5f7980fa90eb03160b69598fb
+  - name: bitflags
+    version: 1.3.2
+    sha: bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a
+  - name: block
+    version: 0.1.6
+    sha: 0d8c1fef690941d3e7788d328517591fecc684c084084702d6ff1641e993699a
+  - name: bstr
+    version: 0.2.17
+    sha: ba3569f383e8f1598449f1a423e72e99569137b47740b1da11ef19af3d5c3223
+  - name: bumpalo
+    version: 3.11.0
+    sha: c1ad822118d20d2c234f427000d5acc36eabe1e29a348c89b63dd60b13f28e5d
+  - name: bytemuck
+    version: 1.12.1
+    sha: 2f5715e491b5a1598fc2bef5a606847b5dc1d48ea625bd3c02c00de8285591da
+  - name: byteorder
+    version: 1.4.3
+    sha: 14c189c53d098945499cdfa7ecc63567cf3886b3332b312a5b4585d8d3a6a610
+  - name: cairo-rs
+    version: 0.15.12
+    sha: c76ee391b03d35510d9fa917357c7f1855bd9a6659c95a1b392e33f49b3369bc
+  - name: cairo-sys-rs
+    version: 0.15.1
+    sha: 3c55d429bef56ac9172d25fecb85dc8068307d17acd74b377866b7a1ef25d3c8
+  - name: cast
+    version: 0.3.0
+    sha: 37b2a672a2cb129a2e41c10b1224bb368f9f37a2b16b612598138befd7b37eb5
+  - name: cfg-expr
+    version: 0.10.3
+    sha: 0aacacf4d96c24b2ad6eb8ee6df040e4f27b0d0b39a5710c30091baa830485db
+  - name: cfg-if
+    version: 1.0.0
+    sha: baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd
+  - name: chrono
+    version: 0.4.22
+    sha: bfd4d1b31faaa3a89d7934dbded3111da0d2ef28e3ebccdb4f0179f5929d1ef1
+  - name: clap
+    version: 2.34.0
+    sha: a0610544180c38b88101fecf2dd634b174a62eef6946f84dfc6a7127512b381c
+  - name: clap
+    version: 3.2.22
+    sha: 86447ad904c7fb335a790c9d7fe3d0d971dc523b8ccd1561a520de9a85302750
+  - name: clap_derive
+    version: 3.2.18
+    sha: ea0c8bce528c4be4da13ea6fead8965e95b6073585a2f05204bd8f4119f82a65
+  - name: clap_lex
+    version: 0.2.4
+    sha: 2850f2f5a82cbf437dd5af4d49848fbdfc27c157c3d010345776f952765261c5
+  - name: const-cstr
+    version: 0.3.0
+    sha: ed3d0b5ff30645a68f35ece8cea4556ca14ef8a1651455f789a099a0513532a6
+  - name: const_fn
+    version: 0.4.9
+    sha: fbdcdcb6d86f71c5e97409ad45898af11cbc995b4ee8112d59095a28d376c935
+  - name: convert_case
+    version: 0.4.0
+    sha: 6245d59a3e82a7fc217c5828a6692dbc6dfb63a0c8c90495621f7b9d79704a0e
+  - name: core-foundation-sys
+    version: 0.8.3
+    sha: 5827cebf4670468b8772dd191856768aedcb1b0278a04f989f7766351917b9dc
+  - name: crc32fast
+    version: 1.3.2
+    sha: b540bd8bc810d3885c6ea91e2018302f68baba2129ab3e88f32389ee9370880d
+  - name: criterion
+    version: 0.3.6
+    sha: b01d6de93b2b6c65e17c634a26653a29d107b3c98c607c765bf38d041531cd8f
+  - name: criterion-plot
+    version: 0.4.5
+    sha: 2673cc8207403546f45f5fd319a974b1e6983ad1a3ee7e6041650013be041876
+  - name: crossbeam-channel
+    version: 0.5.6
+    sha: c2dd04ddaf88237dc3b8d8f9a3c1004b506b54b3313403944054d23c0870c521
+  - name: crossbeam-deque
+    version: 0.8.2
+    sha: 715e8152b692bba2d374b53d4875445368fdf21a94751410af607a5ac677d1fc
+  - name: crossbeam-epoch
+    version: 0.9.10
+    sha: 045ebe27666471bb549370b4b0b3e51b07f56325befa4284db65fc89c02511b1
+  - name: crossbeam-utils
+    version: 0.8.11
+    sha: 51887d4adc7b564537b15adcfb307936f8075dfcd5f00dde9a9f1d29383682bc
+  - name: cssparser
+    version: 0.28.1
+    sha: 1db8599a9761b371751fbf13e076fa03c6e1a78f8c5288e6ab9467f10a2322c1
+  - name: cssparser-macros
+    version: 0.6.0
+    sha: dfae75de57f2b2e85e8768c3ea840fd159c8f33e2b6522c7835b7abac81be16e
+  - name: csv
+    version: 1.1.6
+    sha: 22813a6dc45b335f9bade10bf7271dc477e81113e89eb251a0bc2a8a81c536e1
+  - name: csv-core
+    version: 0.1.10
+    sha: 2b2466559f260f48ad25fe6317b3c8dac77b5bdb5763ac7d9d6103530663bc90
+  - name: data-url
+    version: 0.1.1
+    sha: 3a30bfce702bcfa94e906ef82421f2c0e61c076ad76030c16ee5d2e9a32fe193
+  - name: derive_more
+    version: 0.99.17
+    sha: 4fb810d30a7c1953f91334de7244731fc3f3c10d7fe163338a35b9f640960321
+  - name: difflib
+    version: 0.4.0
+    sha: 6184e33543162437515c2e2b48714794e37845ec9851711914eec9d308f6ebe8
+  - name: discard
+    version: 1.0.4
+    sha: 212d0f5754cb6769937f4501cc0e67f4f4483c8d2c3e1e922ee9edbe4ab4c7c0
+  - name: doc-comment
+    version: 0.3.3
+    sha: fea41bba32d969b513997752735605054bc0dfa92b4c56bf1189f2e174be7a10
+  - name: dtoa
+    version: 0.4.8
+    sha: 56899898ce76aaf4a0f24d914c97ea6ed976d42fec6ad33fcbb0a1103e07b2b0
+  - name: dtoa-short
+    version: 0.3.3
+    sha: bde03329ae10e79ede66c9ce4dc930aa8599043b0743008548680f25b91502d6
+  - name: either
+    version: 1.8.0
+    sha: 90e5c1c8368803113bf0c9584fc495a58b86dc8a29edbf8fe877d21d9507e797
+  - name: encoding
+    version: 0.2.33
+    sha: 6b0d943856b990d12d3b55b359144ff341533e516d94098b1d3fc1ac666d36ec
+  - name: encoding-index-japanese
+    version: 1.20141219.5
+    sha: 04e8b2ff42e9a05335dbf8b5c6f7567e5591d0d916ccef4e0b1710d32a0d0c91
+  - name: encoding-index-korean
+    version: 1.20141219.5
+    sha: 4dc33fb8e6bcba213fe2f14275f0963fd16f0a02c878e3095ecfdf5bee529d81
+  - name: encoding-index-simpchinese
+    version: 1.20141219.5
+    sha: d87a7194909b9118fc707194baa434a4e3b0fb6a5a757c73c3adb07aa25031f7
+  - name: encoding-index-singlebyte
+    version: 1.20141219.5
+    sha: 3351d5acffb224af9ca265f435b859c7c01537c0849754d3db3fdf2bfe2ae84a
+  - name: encoding-index-tradchinese
+    version: 1.20141219.5
+    sha: fd0e20d5688ce3cab59eb3ef3a2083a5c77bf496cb798dc6fcdb75f323890c18
+  - name: encoding_index_tests
+    version: 0.1.4
+    sha: a246d82be1c9d791c5dfde9a2bd045fc3cbba3fa2b11ad558f27d01712f00569
+  - name: fastrand
+    version: 1.8.0
+    sha: a7a407cfaa3385c4ae6b23e84623d48c2798d06e3e6a1878f7f59f17b3f86499
+  - name: flate2
+    version: 1.0.24
+    sha: f82b0f4c27ad9f8bfd1f3208d882da2b09c301bc1c828fd3a00d0216d2fbbff6
+  - name: float-cmp
+    version: 0.9.0
+    sha: 98de4bbd547a563b716d8dfa9aad1cb19bfab00f4fa09a6a4ed21dbcf44ce9c4
+  - name: fnv
+    version: 1.0.7
+    sha: 3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1
+  - name: form_urlencoded
+    version: 1.1.0
+    sha: a9c384f161156f5260c24a097c56119f9be8c798586aecc13afbcbe7b7e26bf8
+  - name: futf
+    version: 0.1.5
+    sha: df420e2e84819663797d1ec6544b13c5be84629e7bb00dc960d6917db2987843
+  - name: futures-channel
+    version: 0.3.24
+    sha: 30bdd20c28fadd505d0fd6712cdfcb0d4b5648baf45faef7f852afb2399bb050
+  - name: futures-core
+    version: 0.3.24
+    sha: 4e5aa3de05362c3fb88de6531e6296e85cde7739cccad4b9dfeeb7f6ebce56bf
+  - name: futures-executor
+    version: 0.3.24
+    sha: 9ff63c23854bee61b6e9cd331d523909f238fc7636290b96826e9cfa5faa00ab
+  - name: futures-io
+    version: 0.3.24
+    sha: bbf4d2a7a308fd4578637c0b17c7e1c7ba127b8f6ba00b29f717e9655d85eb68
+  - name: futures-task
+    version: 0.3.24
+    sha: a6508c467c73851293f390476d4491cf4d227dbabcd4170f3bb6044959b294f1
+  - name: futures-util
+    version: 0.3.24
+    sha: 44fb6cb1be61cc1d2e43b262516aafcf63b241cffdb1d3fa115f91d9c7b09c90
+  - name: fxhash
+    version: 0.2.1
+    sha: c31b6d751ae2c7f11320402d34e41349dd1016f8d5d45e48c4312bc8625af50c
+  - name: gdk-pixbuf
+    version: 0.15.11
+    sha: ad38dd9cc8b099cceecdf41375bb6d481b1b5a7cd5cd603e10a69a9383f8619a
+  - name: gdk-pixbuf-sys
+    version: 0.15.10
+    sha: 140b2f5378256527150350a8346dbdb08fadc13453a7a2d73aecd5fab3c402a7
+  - name: getrandom
+    version: 0.1.16
+    sha: 8fc3cb4d91f53b50155bdcfd23f6a4c39ae1969c2ae85982b135750cccaf5fce
+  - name: getrandom
+    version: 0.2.7
+    sha: 4eb1a864a501629691edf6c15a593b7a51eebaa1e8468e9ddc623de7c9b58ec6
+  - name: gio
+    version: 0.15.12
+    sha: 68fdbc90312d462781a395f7a16d96a2b379bb6ef8cd6310a2df272771c4283b
+  - name: gio-sys
+    version: 0.15.10
+    sha: 32157a475271e2c4a023382e9cab31c4584ee30a97da41d3c4e9fdd605abcf8d
+  - name: glib
+    version: 0.15.12
+    sha: edb0306fbad0ab5428b0ca674a23893db909a98582969c9b537be4ced78c505d
+  - name: glib-macros
+    version: 0.15.11
+    sha: 25a68131a662b04931e71891fb14aaf65ee4b44d08e8abc10f49e77418c86c64
+  - name: glib-sys
+    version: 0.15.10
+    sha: ef4b192f8e65e9cf76cbf4ea71fa8e3be4a0e18ffe3d68b8da6836974cc5bad4
+  - name: glob
+    version: 0.3.0
+    sha: 9b919933a397b79c37e33b77bb2aa3dc8eb6e165ad809e58ff75bc7db2e34574
+  - name: gobject-sys
+    version: 0.15.10
+    sha: 0d57ce44246becd17153bd035ab4d32cfee096a657fc01f2231c9278378d1e0a
+  - name: half
+    version: 1.8.2
+    sha: eabb4a44450da02c90444cf74558da904edde8fb4e9035a9a6a4e15445af0bd7
+  - name: hashbrown
+    version: 0.12.3
+    sha: 8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888
+  - name: heck
+    version: 0.4.0
+    sha: 2540771e65fc8cb83cd6e8a237f70c319bd5c29f78ed1084ba5d50eeac86f7f9
+  - name: hermit-abi
+    version: 0.1.19
+    sha: 62b467343b94ba476dcb2500d242dadbb39557df889310ac77c5d99100aaac33
+  - name: iana-time-zone
+    version: 0.1.48
+    sha: 237a0714f28b1ee39ccec0770ccb544eb02c9ef2c82bb096230eefcffa6468b0
+  - name: idna
+    version: 0.3.0
+    sha: e14ddfc70884202db2244c223200c204c2bda1bc6e0998d11b5e024d657209e6
+  - name: indexmap
+    version: 1.9.1
+    sha: 10a35a97730320ffe8e2d410b5d3b69279b98d2c14bdb8b70ea89ecf7888d41e
+  - name: instant
+    version: 0.1.12
+    sha: 7a5bbe824c507c5da5956355e86a746d82e0e1464f65d862cc5e71da70e94b2c
+  - name: itertools
+    version: 0.10.4
+    sha: d8bf247779e67a9082a4790b45e71ac7cfd1321331a5c856a74a9faebdab78d0
+  - name: itoa
+    version: 0.4.8
+    sha: b71991ff56294aa922b450139ee08b3bfc70982c6b2c7562771375cf73542dd4
+  - name: itoa
+    version: 1.0.3
+    sha: 6c8af84674fe1f223a982c933a0ee1086ac4d4052aa0fb8060c12c6ad838e754
+  - name: js-sys
+    version: 0.3.60
+    sha: 49409df3e3bf0856b916e2ceaca09ee28e6871cf7d9ce97a692cacfdb2a25a47
+  - name: language-tags
+    version: 0.3.2
+    sha: d4345964bb142484797b161f473a503a434de77149dd8c7427788c6e13379388
+  - name: lazy_static
+    version: 1.4.0
+    sha: e2abad23fbc42b3700f2f279844dc832adb2b2eb069b2df918f455c4e18cc646
+  - name: libc
+    version: 0.2.133
+    sha: c0f80d65747a3e43d1596c7c5492d95d5edddaabd45a7fcdb02b95f644164966
+  - name: linked-hash-map
+    version: 0.5.6
+    sha: 0717cef1bc8b636c6e1c1bbdefc09e6322da8a9321966e8928ef80d20f7f770f
+  - name: locale_config
+    version: 0.3.0
+    sha: 08d2c35b16f4483f6c26f0e4e9550717a2f6575bcd6f12a53ff0c490a94a6934
+  - name: lock_api
+    version: 0.4.8
+    sha: 9f80bf5aacaf25cbfc8210d1cfb718f2bf3b11c4c54e5afe36c236853a8ec390
+  - name: log
+    version: 0.4.17
+    sha: abb12e687cfb44aa40f41fc3978ef76448f9b6038cad6aef4259d3c095a2382e
+  - name: lopdf
+    version: 0.26.0
+    sha: b49a0272112719d0037ab63d4bb67f73ba659e1e90bc38f235f163a457ac16f3
+  - name: lzw
+    version: 0.10.0
+    sha: 7d947cbb889ed21c2a84be6ffbaebf5b4e0f4340638cba0444907e38b56be084
+  - name: mac
+    version: 0.1.1
+    sha: c41e0c4fef86961ac6d6f8a82609f55f31b05e4fce149ac5710e439df7619ba4
+  - name: malloc_buf
+    version: 0.0.6
+    sha: 62bb907fe88d54d8d9ce32a3cceab4218ed2f6b7d35617cafe9adf84e43919cb
+  - name: markup5ever
+    version: 0.10.1
+    sha: a24f40fb03852d1cdd84330cddcaf98e9ec08a7b7768e952fad3b4cf048ec8fd
+  - name: matches
+    version: 0.1.9
+    sha: a3e378b66a060d48947b590737b30a1be76706c8dd7b8ba0f2fe3989c68a853f
+  - name: matrixmultiply
+    version: 0.3.2
+    sha: add85d4dd35074e6fedc608f8c8f513a3548619a9024b751949ef0e8e45a4d84
+  - name: memchr
+    version: 2.5.0
+    sha: 2dffe52ecf27772e601905b7522cb4ef790d2cc203488bbd0e2fe85fcb74566d
+  - name: memoffset
+    version: 0.6.5
+    sha: 5aa361d4faea93603064a027415f07bd8e1d5c88c9fbf68bf56a285428fd79ce
+  - name: miniz_oxide
+    version: 0.5.4
+    sha: 96590ba8f175222643a85693f33d26e9c8a015f599c216509b1a6894af675d34
+  - name: nalgebra
+    version: 0.30.1
+    sha: 4fb2d0de08694bed883320212c18ee3008576bfe8c306f4c3c4a58b4876998be
+  - name: nalgebra-macros
+    version: 0.1.0
+    sha: 01fcc0b8149b4632adc89ac3b7b31a12fb6099a0317a4eb2ebff574ef7de7218
+  - name: new_debug_unreachable
+    version: 1.0.4
+    sha: e4a24736216ec316047a1fc4252e27dabb04218aa4a3f37c6e7ddbf1f9782b54
+  - name: nodrop
+    version: 0.1.14
+    sha: 72ef4a56884ca558e5ddb05a1d1e7e1bfd9a68d9ed024c21704cc98872dae1bb
+  - name: normalize-line-endings
+    version: 0.3.0
+    sha: 61807f77802ff30975e01f4f071c8ba10c022052f98b3294119f3e615d13e5be
+  - name: num-complex
+    version: 0.4.2
+    sha: 7ae39348c8bc5fbd7f40c727a9925f03517afd2ab27d46702108b6a7e5414c19
+  - name: num-integer
+    version: 0.1.45
+    sha: 225d3389fb3509a24c93f5c29eb6bde2586b98d9f016636dff58d7c6f7569cd9
+  - name: num-rational
+    version: 0.4.1
+    sha: 0638a1c9d0a3c0914158145bc76cff373a75a627e6ecbfb71cbe6f453a5a19b0
+  - name: num-traits
+    version: 0.2.15
+    sha: 578ede34cf02f8924ab9447f50c28075b4d3e5b269972345e7e0372b38c6cdcd
+  - name: num_cpus
+    version: 1.13.1
+    sha: 19e64526ebdee182341572e50e9ad03965aa510cd94427a4549448f285e957a1
+  - name: objc
+    version: 0.2.7
+    sha: 915b1b472bc21c53464d6c8461c9d3af805ba1ef837e1cac254428f4a77177b1
+  - name: objc-foundation
+    version: 0.1.1
+    sha: 1add1b659e36c9607c7aab864a76c7a4c2760cd0cd2e120f3fb8b952c7e22bf9
+  - name: objc_id
+    version: 0.1.1
+    sha: c92d4ddb4bd7b50d730c215ff871754d0da6b2178849f8a2a2ab69712d0c073b
+  - name: once_cell
+    version: 1.14.0
+    sha: 2f7254b99e31cad77da24b08ebf628882739a608578bb1bcdfc1f9c21260d7c0
+  - name: oorandom
+    version: 11.1.3
+    sha: 0ab1bc2a289d34bd04a330323ac98a1b4bc82c9d9fcb1e66b63caa84da26b575
+  - name: os_str_bytes
+    version: 6.3.0
+    sha: 9ff7415e9ae3fff1225851df9e0d9e4e5479f947619774677a63572e55e80eff
+  - name: pango
+    version: 0.15.10
+    sha: 22e4045548659aee5313bde6c582b0d83a627b7904dd20dc2d9ef0895d414e4f
+  - name: pango-sys
+    version: 0.15.10
+    sha: d2a00081cde4661982ed91d80ef437c20eacaf6aa1a5962c0279ae194662c3aa
+  - name: pangocairo
+    version: 0.15.1
+    sha: 7876a45c1f1d1a75a2601dc6d9ef2cb5a8be0e3d76f909d82450759929035366
+  - name: pangocairo-sys
+    version: 0.15.1
+    sha: 78cf746594916c81d5f739af9335c5f55a1f4606d80b3e1d821f18cf95a29494
+  - name: parking_lot
+    version: 0.12.1
+    sha: 3742b2c103b9f06bc9fff0a37ff4912935851bee6d36f3c02bcc755bcfec228f
+  - name: parking_lot_core
+    version: 0.9.3
+    sha: 09a279cbf25cb0757810394fbc1e359949b59e348145c643a939a525692e6929
+  - name: paste
+    version: 1.0.9
+    sha: b1de2e551fb905ac83f73f7aedf2f0cb4a0da7e35efa24a202a936269f1f18e1
+  - name: percent-encoding
+    version: 2.2.0
+    sha: 478c572c3d73181ff3c2539045f6eb99e5491218eae919370993b890cdbdd98e
+  - name: phf
+    version: 0.8.0
+    sha: 3dfb61232e34fcb633f43d12c58f83c1df82962dcdfa565a4e866ffc17dafe12
+  - name: phf_codegen
+    version: 0.8.0
+    sha: cbffee61585b0411840d3ece935cce9cb6321f01c45477d30066498cd5e1a815
+  - name: phf_generator
+    version: 0.10.0
+    sha: 5d5285893bb5eb82e6aaf5d59ee909a06a16737a8970984dd7746ba9283498d6
+  - name: phf_generator
+    version: 0.8.0
+    sha: 17367f0cc86f2d25802b2c26ee58a7b23faeccf78a396094c13dced0d0182526
+  - name: phf_macros
+    version: 0.8.0
+    sha: 7f6fde18ff429ffc8fe78e2bf7f8b7a5a5a6e2a8b58bc5a9ac69198bbda9189c
+  - name: phf_shared
+    version: 0.10.0
+    sha: b6796ad771acdc0123d2a88dc428b5e38ef24456743ddb1744ed628f9815c096
+  - name: phf_shared
+    version: 0.8.0
+    sha: c00cf8b9eafe68dde5e9eaa2cef8ee84a9336a47d566ec55ca16589633b65af7
+  - name: pin-project-lite
+    version: 0.2.9
+    sha: e0a7ae3ac2f1173085d398531c705756c94a4c56843785df85a60c1a0afac116
+  - name: pin-utils
+    version: 0.1.0
+    sha: 8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184
+  - name: pkg-config
+    version: 0.3.25
+    sha: 1df8c4ec4b0627e53bdf214615ad287367e482558cf84b109250b37464dc03ae
+  - name: plotters
+    version: 0.3.4
+    sha: 2538b639e642295546c50fcd545198c9d64ee2a38620a628724a3b266d5fbf97
+  - name: plotters-backend
+    version: 0.3.4
+    sha: 193228616381fecdc1224c62e96946dfbc73ff4384fba576e052ff8c1bea8142
+  - name: plotters-svg
+    version: 0.3.3
+    sha: f9a81d2759aae1dae668f783c308bc5c8ebd191ff4184aaa1b37f65a6ae5a56f
+  - name: png
+    version: 0.17.6
+    sha: 8f0e7f4c94ec26ff209cee506314212639d6c91b80afb82984819fafce9df01c
+  - name: pom
+    version: 3.2.0
+    sha: 07e2192780e9f8e282049ff9bffcaa28171e1cb0844f49ed5374e518ae6024ec
+  - name: ppv-lite86
+    version: 0.2.16
+    sha: eb9f9e6e233e5c4a35559a617bf40a4ec447db2e84c20b55a6f83167b7e57872
+  - name: precomputed-hash
+    version: 0.1.1
+    sha: 925383efa346730478fb4838dbe9137d2a47675ad789c546d150a6e1dd4ab31c
+  - name: predicates
+    version: 2.1.1
+    sha: a5aab5be6e4732b473071984b3164dbbfb7a3674d30ea5ff44410b6bcd960c3c
+  - name: predicates-core
+    version: 1.0.3
+    sha: da1c2388b1513e1b605fcec39a95e0a9e8ef088f71443ef37099fa9ae6673fcb
+  - name: predicates-tree
+    version: 1.0.5
+    sha: 4d86de6de25020a36c6d3643a86d9a6a9f552107c0559c60ea03551b5e16c032
+  - name: proc-macro-crate
+    version: 1.2.1
+    sha: eda0fc3b0fb7c975631757e14d9049da17374063edb6ebbcbc54d880d4fe94e9
+  - name: proc-macro-error
+    version: 1.0.4
+    sha: da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c
+  - name: proc-macro-error-attr
+    version: 1.0.4
+    sha: a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869
+  - name: proc-macro-hack
+    version: 0.5.19
+    sha: dbf0c48bc1d91375ae5c3cd81e3722dff1abcf81a30960240640d223f59fe0e5
+  - name: proc-macro2
+    version: 0.4.30
+    sha: cf3d2011ab5c909338f7887f4fc896d35932e29146c12c8d01da6b22a80ba759
+  - name: proc-macro2
+    version: 1.0.43
+    sha: 0a2ca2c61bc9f3d74d2886294ab7b9853abd9c1ad903a3ac7815c58989bb7bab
+  - name: proptest
+    version: 1.0.0
+    sha: 1e0d9cc07f18492d879586c92b485def06bc850da3118075cd45d50e9c95b0e5
+  - name: quick-error
+    version: 1.2.3
+    sha: a1d01941d82fa2ab50be1e79e6714289dd7cde78eba4c074bc5a4374f650dfe0
+  - name: quick-error
+    version: 2.0.1
+    sha: a993555f31e5a609f617c12db6250dedcac1b0a85076912c436e6fc9b2c8e6a3
+  - name: quote
+    version: 0.6.13
+    sha: 6ce23b6b870e8f94f81fb0a363d65d86675884b34a09043c81e5562f11c1f8e1
+  - name: quote
+    version: 1.0.21
+    sha: bbe448f377a7d6961e30f5955f9b8d106c3f5e449d493ee1b125c1d43c2b5179
+  - name: rand
+    version: 0.7.3
+    sha: 6a6b1679d49b24bbfe0c803429aa1874472f50d9b363131f0e89fc356b544d03
+  - name: rand
+    version: 0.8.5
+    sha: 34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404
+  - name: rand_chacha
+    version: 0.2.2
+    sha: f4c8ed856279c9737206bf725bf36935d8666ead7aa69b52be55af369d193402
+  - name: rand_chacha
+    version: 0.3.1
+    sha: e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88
+  - name: rand_core
+    version: 0.5.1
+    sha: 90bde5296fc891b0cef12a6d03ddccc162ce7b2aff54160af9338f8d40df6d19
+  - name: rand_core
+    version: 0.6.4
+    sha: ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c
+  - name: rand_hc
+    version: 0.2.0
+    sha: ca3129af7b92a17112d59ad498c6f81eaf463253766b90396d39ea7a39d6613c
+  - name: rand_pcg
+    version: 0.2.1
+    sha: 16abd0c1b639e9eb4d7c50c0b8100b0d0f849be2349829c740fe8e6eb4816429
+  - name: rand_xorshift
+    version: 0.3.0
+    sha: d25bf25ec5ae4a3f1b92f929810509a2f53d7dca2f50b794ff57e3face536c8f
+  - name: rawpointer
+    version: 0.2.1
+    sha: 60a357793950651c4ed0f3f52338f53b2f809f32d83a07f72909fa13e4c6c1e3
+  - name: rayon
+    version: 1.5.3
+    sha: bd99e5772ead8baa5215278c9b15bf92087709e9c1b2d1f97cdb5a183c933a7d
+  - name: rayon-core
+    version: 1.9.3
+    sha: 258bcdb5ac6dad48491bb2992db6b7cf74878b0384908af124823d118c99683f
+  - name: rctree
+    version: 0.4.0
+    sha: 9ae028b272a6e99d9f8260ceefa3caa09300a8d6c8d2b2001316474bc52122e9
+  - name: redox_syscall
+    version: 0.2.16
+    sha: fb5a58c1855b4b6819d59012155603f0b22ad30cad752600aadfcb695265519a
+  - name: regex
+    version: 1.6.0
+    sha: 4c4eb3267174b8c6c2f654116623910a0fef09c4753f8dd83db29c48a0df988b
+  - name: regex-automata
+    version: 0.1.10
+    sha: 6c230d73fb8d8c1b9c0b3135c5142a8acee3a0558fb8db5cf1cb65f8d7862132
+  - name: regex-syntax
+    version: 0.6.27
+    sha: a3f87b73ce11b1619a3c6332f45341e0047173771e8b8b73f87bfeefb7b56244
+  - name: remove_dir_all
+    version: 0.5.3
+    sha: 3acd125665422973a33ac9d3dd2df85edad0f4ae9b00dafb1a05e43a9f5ef8e7
+  - name: rgb
+    version: 0.8.34
+    sha: 3603b7d71ca82644f79b5a06d1220e9a58ede60bd32255f698cb1af8838b8db3
+  - name: rustc_version
+    version: 0.2.3
+    sha: 138e3e0acb6c9fb258b19b67cb8abd63c00679d2851805ea151465464fe9030a
+  - name: rustc_version
+    version: 0.4.0
+    sha: bfa0f585226d2e68097d4f95d113b15b83a82e819ab25717ec0590d9584ef366
+  - name: rusty-fork
+    version: 0.3.0
+    sha: cb3dcc6e454c328bb824492db107ab7c0ae8fcffe4ad210136ef014458c1bc4f
+  - name: ryu
+    version: 1.0.11
+    sha: 4501abdff3ae82a1c1b477a17252eb69cee9e66eb915c1abaa4f44d873df9f09
+  - name: safe_arch
+    version: 0.6.0
+    sha: 794821e4ccb0d9f979512f9c1973480123f9bd62a90d74ab0f9426fcf8f4a529
+  - name: same-file
+    version: 1.0.6
+    sha: 93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502
+  - name: scopeguard
+    version: 1.1.0
+    sha: d29ab0c6d3fc0ee92fe66e2d99f700eab17a8d57d1c1d3b748380fb20baa78cd
+  - name: selectors
+    version: 0.23.0
+    sha: fdea87c686be721aab36607728047801ee21561bfdbd6bf0da7ace2536d5879f
+  - name: semver
+    version: 0.9.0
+    sha: 1d7eb9ef2c18661902cc47e535f9bc51b78acd254da71d375c2f6720d9a40403
+  - name: semver
+    version: 1.0.14
+    sha: e25dfac463d778e353db5be2449d1cce89bd6fd23c9f1ea21310ce6e5a1b29c4
+  - name: semver-parser
+    version: 0.7.0
+    sha: 388a1df253eca08550bef6c72392cfe7c30914bf41df5269b68cbd6ff8f570a3
+  - name: serde
+    version: 1.0.144
+    sha: 0f747710de3dcd43b88c9168773254e809d8ddbdf9653b84e2554ab219f17860
+  - name: serde_cbor
+    version: 0.11.2
+    sha: 2bef2ebfde456fb76bbcf9f59315333decc4fda0b2b44b420243c11e0f5ec1f5
+  - name: serde_derive
+    version: 1.0.144
+    sha: 94ed3a816fb1d101812f83e789f888322c34e291f894f19590dc310963e87a00
+  - name: serde_json
+    version: 1.0.85
+    sha: e55a28e3aaef9d5ce0506d0a14dbba8054ddc7e499ef522dd8b26859ec9d4a44
+  - name: servo_arc
+    version: 0.1.1
+    sha: d98238b800e0d1576d8b6e3de32827c2d74bee68bb97748dcf5071fb53965432
+  - name: sha1
+    version: 0.6.1
+    sha: c1da05c97445caa12d05e848c4a4fcbbea29e748ac28f7e80e9b010392063770
+  - name: sha1_smol
+    version: 1.0.0
+    sha: ae1a47186c03a32177042e55dbc5fd5aee900b8e0069a8d70fba96a9375cd012
+  - name: simba
+    version: 0.7.2
+    sha: c48e45e5961033db030b56ad67aef22e9c908c493a6e8348c0a0f6b93433cd77
+  - name: siphasher
+    version: 0.3.10
+    sha: 7bd3e3206899af3f8b12af284fafc038cc1dc2b41d1b89dd17297221c5d225de
+  - name: slab
+    version: 0.4.7
+    sha: 4614a76b2a8be0058caa9dbbaf66d988527d86d003c11a94fbd335d7661edcef
+  - name: smallvec
+    version: 1.9.0
+    sha: 2fd0db749597d91ff862fd1d55ea87f7855a744a8425a64695b6fca237d1dad1
+  - name: stable_deref_trait
+    version: 1.2.0
+    sha: a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3
+  - name: standback
+    version: 0.2.17
+    sha: e113fb6f3de07a243d434a56ec6f186dfd51cb08448239fe7bcae73f87ff28ff
+  - name: stdweb
+    version: 0.4.20
+    sha: d022496b16281348b52d0e30ae99e01a73d737b2f45d38fed4edf79f9325a1d5
+  - name: stdweb-derive
+    version: 0.5.3
+    sha: c87a60a40fccc84bef0652345bbbbbe20a605bf5d0ce81719fc476f5c03b50ef
+  - name: stdweb-internal-macros
+    version: 0.2.9
+    sha: 58fa5ff6ad0d98d1ffa8cb115892b6e69d67799f6763e162a1c9db421dc22e11
+  - name: stdweb-internal-runtime
+    version: 0.1.5
+    sha: 213701ba3370744dcd1a12960caa4843b3d68b4d1c0a5d575e0d65b2ee9d16c0
+  - name: string_cache
+    version: 0.8.4
+    sha: 213494b7a2b503146286049378ce02b482200519accc31872ee8be91fa820a08
+  - name: string_cache_codegen
+    version: 0.5.2
+    sha: 6bb30289b722be4ff74a408c3cc27edeaad656e06cb1fe8fa9231fa59c728988
+  - name: strsim
+    version: 0.10.0
+    sha: 73473c0e59e6d5812c5dfe2a064a6444949f089e20eec9a2e5506596494e4623
+  - name: syn
+    version: 0.15.44
+    sha: 9ca4b3b69a77cbe1ffc9e198781b7acb0c7365a883670e8f1c1bc66fba79a5c5
+  - name: syn
+    version: 1.0.100
+    sha: 52205623b1b0f064a4e71182c3b18ae902267282930c6d5462c91b859668426e
+  - name: system-deps
+    version: 6.0.2
+    sha: a1a45a1c4c9015217e12347f2a411b57ce2c4fc543913b14b6fe40483328e709
+  - name: tempfile
+    version: 3.3.0
+    sha: 5cdb1ef4eaeeaddc8fbd371e5017057064af0911902ef36b39801f67cc6d79e4
+  - name: tendril
+    version: 0.4.3
+    sha: d24a120c5fc464a3458240ee02c299ebcb9d67b5249c8848b09d639dca8d7bb0
+  - name: termcolor
+    version: 1.1.3
+    sha: bab24d30b911b2376f3a13cc2cd443142f0c81dda04c118693e35b3835757755
+  - name: termtree
+    version: 0.2.4
+    sha: 507e9898683b6c43a9aa55b64259b721b52ba226e0f3779137e50ad114a4c90b
+  - name: test-generator
+    version: 0.3.0
+    sha: ea97be90349ab3574f6e74d1566e1c5dd3a4bc74b89f4af4cc10ca010af103c0
+  - name: textwrap
+    version: 0.11.0
+    sha: d326610f408c7a4eb6f51c37c330e496b08506c9457c9d34287ecc38809fb060
+  - name: textwrap
+    version: 0.15.1
+    sha: 949517c0cf1bf4ee812e2e07e08ab448e3ae0d23472aee8a06c985f0c8815b16
+  - name: thiserror
+    version: 1.0.35
+    sha: c53f98874615aea268107765aa1ed8f6116782501d18e53d08b471733bea6c85
+  - name: thiserror-impl
+    version: 1.0.35
+    sha: f8b463991b4eab2d801e724172285ec4195c650e8ec79b149e6c2a8e6dd3f783
+  - name: time
+    version: 0.1.44
+    sha: 6db9e6914ab8b1ae1c260a4ae7a49b6c5611b40328a735b21862567685e73255
+  - name: time
+    version: 0.2.27
+    sha: 4752a97f8eebd6854ff91f1c1824cd6160626ac4bd44287f7f4ea2035a02a242
+  - name: time-macros
+    version: 0.1.1
+    sha: 957e9c6e26f12cb6d0dd7fc776bb67a706312e7299aed74c8dd5b17ebb27e2f1
+  - name: time-macros-impl
+    version: 0.1.2
+    sha: fd3c141a1b43194f3f56a1411225df8646c55781d5f26db825b3d98507eb482f
+  - name: tinytemplate
+    version: 1.2.1
+    sha: be4d6b5f19ff7664e8c98d03e2139cb510db9b0a60b55f8e8709b689d939b6bc
+  - name: tinyvec
+    version: 1.6.0
+    sha: 87cc5ceb3875bb20c2890005a4e226a4651264a5c75edb2421b52861a0a0cb50
+  - name: tinyvec_macros
+    version: 0.1.0
+    sha: cda74da7e1a664f795bb1f8a87ec406fb89a02522cf6e50620d016add6dbbf5c
+  - name: toml
+    version: 0.5.9
+    sha: 8d82e1a7758622a465f8cee077614c73484dac5b836c02ff6a40d5d1010324d7
+  - name: typenum
+    version: 1.15.0
+    sha: dcf81ac59edc17cc8697ff311e8f5ef2d99fcbd9817b34cec66f90b6c3dfd987
+  - name: unicode-bidi
+    version: 0.3.8
+    sha: 099b7128301d285f79ddd55b9a83d5e6b9e97c92e0ea0daebee7263e932de992
+  - name: unicode-ident
+    version: 1.0.4
+    sha: dcc811dc4066ac62f84f11307873c4850cb653bfa9b1719cee2bd2204a4bc5dd
+  - name: unicode-normalization
+    version: 0.1.22
+    sha: 5c5713f0fc4b5db668a2ac63cdb7bb4469d8c9fed047b1d0292cc7b0ce2ba921
+  - name: unicode-width
+    version: 0.1.10
+    sha: c0edd1e5b14653f783770bce4a4dabb4a5108a5370a5f5d8cfe8710c361f6c8b
+  - name: unicode-xid
+    version: 0.1.0
+    sha: fc72304796d0818e357ead4e000d19c9c174ab23dc11093ac919054d20a6a7fc
+  - name: url
+    version: 2.3.1
+    sha: 0d68c799ae75762b8c3fe375feb6600ef5602c883c5d21eb51c09f22b83c4643
+  - name: utf-8
+    version: 0.7.6
+    sha: 09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9
+  - name: version-compare
+    version: 0.1.0
+    sha: fe88247b92c1df6b6de80ddc290f3976dbdf2f5f5d3fd049a9fb598c6dd5ca73
+  - name: version_check
+    version: 0.9.4
+    sha: 49874b5167b65d7193b8aba1567f5c7d93d001cafc34600cee003eda787e483f
+  - name: wait-timeout
+    version: 0.2.0
+    sha: 9f200f5b12eb75f8c1ed65abd4b2db8a6e1b138a20de009dacee265a2498f3f6
+  - name: walkdir
+    version: 2.3.2
+    sha: 808cf2735cd4b6866113f648b791c6adc5714537bc222d9347bb203386ffda56
+  - name: wasi
+    version: 0.10.0+wasi-snapshot-preview1
+    sha: 1a143597ca7c7793eff794def352d41792a93c481eb1042423ff7ff72ba2c31f
+  - name: wasi
+    version: 0.11.0+wasi-snapshot-preview1
+    sha: 9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423
+  - name: wasi
+    version: 0.9.0+wasi-snapshot-preview1
+    sha: cccddf32554fecc6acb585f82a32a72e28b48f8c4c1883ddfeeeaa96f7d8e519
+  - name: wasm-bindgen
+    version: 0.2.83
+    sha: eaf9f5aceeec8be17c128b2e93e031fb8a4d469bb9c4ae2d7dc1888b26887268
+  - name: wasm-bindgen-backend
+    version: 0.2.83
+    sha: 4c8ffb332579b0557b52d268b91feab8df3615f265d5270fec2a8c95b17c1142
+  - name: wasm-bindgen-macro
+    version: 0.2.83
+    sha: 052be0f94026e6cbc75cdefc9bae13fd6052cdcaf532fa6c45e7ae33a1e6c810
+  - name: wasm-bindgen-macro-support
+    version: 0.2.83
+    sha: 07bc0c051dc5f23e307b13285f9d75df86bfdf816c5721e573dec1f9b8aa193c
+  - name: wasm-bindgen-shared
+    version: 0.2.83
+    sha: 1c38c045535d93ec4f0b4defec448e4291638ee608530863b1e2ba115d4fff7f
+  - name: web-sys
+    version: 0.3.60
+    sha: bcda906d8be16e728fd5adc5b729afad4e444e106ab28cd1c7256e54fa61510f
+  - name: wide
+    version: 0.7.4
+    sha: b3aba2d1dac31ac7cae82847ac5b8be822aee8f99a4e100f279605016b185c5f
+  - name: winapi
+    version: 0.3.9
+    sha: 5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419
+  - name: winapi-i686-pc-windows-gnu
+    version: 0.4.0
+    sha: ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6
+  - name: winapi-util
+    version: 0.1.5
+    sha: 70ec6ce85bb158151cae5e5c87f95a8e97d2c0c4b001223f33a334e3ce5de178
+  - name: winapi-x86_64-pc-windows-gnu
+    version: 0.4.0
+    sha: 712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f
+  - name: windows-sys
+    version: 0.36.1
+    sha: ea04155a16a59f9eab786fe12a4a450e75cdb175f9e0d80da1e17db09f55b8d2
+  - name: windows_aarch64_msvc
+    version: 0.36.1
+    sha: 9bb8c3fd39ade2d67e9874ac4f3db21f0d710bee00fe7cab16949ec184eeaa47
+  - name: windows_i686_gnu
+    version: 0.36.1
+    sha: 180e6ccf01daf4c426b846dfc66db1fc518f074baa793aa7d9b9aaeffad6a3b6
+  - name: windows_i686_msvc
+    version: 0.36.1
+    sha: e2e7917148b2812d1eeafaeb22a97e4813dfa60a3f8f78ebe204bcc88f12f024
+  - name: windows_x86_64_gnu
+    version: 0.36.1
+    sha: 4dcd171b8776c41b97521e5da127a2d86ad280114807d0b2ab1e462bc764d9e1
+  - name: windows_x86_64_msvc
+    version: 0.36.1
+    sha: c811ca4a8c853ef420abd8592ba53ddbbac90410fab6903b3e79972a631f7680
+  - name: xml5ever
+    version: 0.16.2
+    sha: 9234163818fd8e2418fcde330655e757900d4236acd8cc70fef345ef91f6d865
+  - name: yeslogic-fontconfig-sys
+    version: 2.11.2
+    sha: 38e47154248a2dba5ca6965e26b1a59146210736ea9b862362b6d72682e57f8d
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/libsecret.bst b/elements/sdk/libsecret.bst
index e9e1249be..7f080ce6b 100644
--- a/elements/sdk/libsecret.bst
+++ b/elements/sdk/libsecret.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:libsecret.git
   track: master
+  ref: 0.20.5-8-g921f5f0d2eda9f87c6a6af234d068addb5d749f1
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/sdk/libsoup-2.4.bst b/elements/sdk/libsoup-2.4.bst
index e13d602fd..65e183e88 100644
--- a/elements/sdk/libsoup-2.4.bst
+++ b/elements/sdk/libsoup-2.4.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:libsoup.git
   track: gnome-3-38
+  ref: 2.72.0-23-gcca616512506ebc8acd77cc855d482d6499b6354
 
 build-depends:
 - sdk/sysprof-minimal.bst
diff --git a/elements/sdk/libsoup.bst b/elements/sdk/libsoup.bst
index f9e291606..50970199e 100644
--- a/elements/sdk/libsoup.bst
+++ b/elements/sdk/libsoup.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:libsoup.git
   track: master
+  ref: 3.2.0-5-gd86d346450476e7f4b7d5af79d6808d13b29e292
 
 build-depends:
 - sdk-deps/gi-docgen.bst
diff --git a/elements/sdk/libwpe.bst b/elements/sdk/libwpe.bst
index a636a1c43..4338c8b25 100644
--- a/elements/sdk/libwpe.bst
+++ b/elements/sdk/libwpe.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: wpewebkit:libwpe-1.13.2.tar.xz
+  ref: efcd97dc0f95ff7a506483ba3df944669cdc602b3fc45c9fd676dee0f8f92cac
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 
diff --git a/elements/sdk/mozjs.bst b/elements/sdk/mozjs.bst
index f385a98e1..8468ca4a3 100644
--- a/elements/sdk/mozjs.bst
+++ b/elements/sdk/mozjs.bst
@@ -4,6 +4,7 @@ sources:
 - kind: tar
   url: https://ftp.mozilla.org/pub/firefox/releases/102.1.0esr/source/firefox-102.1.0esr.source.tar.xz
   base-dir: 'firefox-102.1.0'
+  ref: 637b6e727d1b815bbc6eb39aeb04c6e144056eeb3c628b298cb16deb3b579460
 - kind: patch
   path: files/mozjs/0001-Bug-1776254-Install-ProfilingCategoryList.h.patch
 - kind: patch
diff --git a/elements/sdk/nuspell.bst b/elements/sdk/nuspell.bst
index 6d3af25c8..e476d3791 100644
--- a/elements/sdk/nuspell.bst
+++ b/elements/sdk/nuspell.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_files:nuspell/nuspell/archive/refs/tags/v5.0.1.tar.gz
+  ref: a48d9b0297f9c87d8e3231b2662786c5380634cd2b2e0005c55709caefdaa032
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 depends:
diff --git a/elements/sdk/pango.bst b/elements/sdk/pango.bst
index dd2f4efa0..d82ae6194 100644
--- a/elements/sdk/pango.bst
+++ b/elements/sdk/pango.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:pango.git
   track: main
+  ref: 1.50.11-1-gb02a13ffae3c2ead604bb2786a805f036a5a0f49
 build-depends:
 - sdk/gobject-introspection.bst
 - sdk-deps/gi-docgen.bst
diff --git a/elements/sdk/pinentry.bst b/elements/sdk/pinentry.bst
index eaccf34b7..1bc58f136 100644
--- a/elements/sdk/pinentry.bst
+++ b/elements/sdk/pinentry.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnupg:ftp/gcrypt/pinentry/pinentry-1.2.0.tar.bz2
+  ref: 10072045a3e043d0581f91cd5676fcac7ffee957a16636adedaa4f583a616470
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/sdk/pygobject.bst b/elements/sdk/pygobject.bst
index 2988b4888..b105bc5c3 100644
--- a/elements/sdk/pygobject.bst
+++ b/elements/sdk/pygobject.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:pygobject.git
   track: master
+  ref: 3.42.0-44-g4b421597d1885c725cbcdd44c4d04277454bee85
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk/tracker.bst b/elements/sdk/tracker.bst
index aa08f2819..01158a7b4 100644
--- a/elements/sdk/tracker.bst
+++ b/elements/sdk/tracker.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:tracker.git
   track: master
+  ref: 3.4.0-22-g3117a912957765d198a1e7a91cca4ab8d312f9b4
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/vala-tarball.bst b/elements/sdk/vala-tarball.bst
index 5ce8cfb4f..91bd8c9c9 100644
--- a/elements/sdk/vala-tarball.bst
+++ b/elements/sdk/vala-tarball.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:vala/0.36/vala-0.36.20.tar.xz
+  ref: be960a87841d85ff76cbd0e10eb691675190e54bd690d76982b3fb94a1fc67a7
 build-depends:
 - freedesktop-sdk.bst:components/bison.bst
 - freedesktop-sdk.bst:components/flex.bst
diff --git a/elements/sdk/vala.bst b/elements/sdk/vala.bst
index 223b7565a..a529a7255 100644
--- a/elements/sdk/vala.bst
+++ b/elements/sdk/vala.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:vala.git
   track: main
+  ref: 0.56.2-21-g9c8a449155c7bd36670ced5fbc98834592a3a65f
 build-depends:
 - sdk/vala-tarball.bst
 - freedesktop-sdk.bst:components/bison.bst
diff --git a/elements/sdk/webkitgtk.inc b/elements/sdk/webkitgtk.inc
index 32f989766..fcccaba3d 100644
--- a/elements/sdk/webkitgtk.inc
+++ b/elements/sdk/webkitgtk.inc
@@ -1,6 +1,7 @@
 sources:
 - kind: tar
   url: webkitgtk:webkitgtk-2.38.0.tar.xz
+  ref: f9ce6375a3b6e1329b0b609f46921e2627dc7ad6224b37b967ab2ea643bc0fbd
 
 build-depends:
 - sdk-deps/bubblewrap.bst
diff --git a/elements/sdk/woff2.bst b/elements/sdk/woff2.bst
index a13fa2532..b459a4ff4 100644
--- a/elements/sdk/woff2.bst
+++ b/elements/sdk/woff2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_files:google/woff2/archive/v1.0.2.tar.gz
+  ref: add272bb09e6384a4833ffca4896350fdb16e0ca22df68c0384773c67a175594
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
 depends:
diff --git a/elements/sdk/wpebackend-fdo.bst b/elements/sdk/wpebackend-fdo.bst
index c8cb0661b..ac6f9ec69 100644
--- a/elements/sdk/wpebackend-fdo.bst
+++ b/elements/sdk/wpebackend-fdo.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: wpewebkit:wpebackend-fdo-1.13.1.tar.xz
+  ref: d61ca47ec52d7cd1d6f869f66d6ea247a53092acfad1a8cbab71836a82d3a0ae
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
 
diff --git a/elements/sdk/yelp-tools.bst b/elements/sdk/yelp-tools.bst
index 2591b3806..34ac410da 100644
--- a/elements/sdk/yelp-tools.bst
+++ b/elements/sdk/yelp-tools.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:yelp-tools.git
   track: master
+  ref: 42.0-2-g73b668ead2b7e915568fd4517dc25cf2dcd9fe43
 build-depends:
 - freedesktop-sdk.bst:components/m4.bst
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/sdk/yelp-xsl.bst b/elements/sdk/yelp-xsl.bst
index c76a81819..33080818d 100644
--- a/elements/sdk/yelp-xsl.bst
+++ b/elements/sdk/yelp-xsl.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git_tag
   url: gnome:yelp-xsl.git
   track: master
+  ref: 42.1-2-g35d009fa07d78c8b0a9e24f6e80eb6f61fbcca22
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/sdk/yelp.bst b/elements/sdk/yelp.bst
index c1f3e60c1..fe95a09df 100644
--- a/elements/sdk/yelp.bst
+++ b/elements/sdk/yelp.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome:yelp.git
   track: master
+  ref: 42.2-2-g7564bf1bc10eeaa7395b9f196e767bfeed89c82b
 
 build-depends:
 - sdk/appstream-glib.bst
diff --git a/elements/vm/NetworkManager-fortisslvpn.bst b/elements/vm/NetworkManager-fortisslvpn.bst
index bdc5a5575..d7edcb310 100644
--- a/elements/vm/NetworkManager-fortisslvpn.bst
+++ b/elements/vm/NetworkManager-fortisslvpn.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:NetworkManager-fortisslvpn/1.3/NetworkManager-fortisslvpn-1.3.90.tar.xz
+  ref: 884a7432bb38ae9c942e094f23d0a3feb504432153c3d2869ab71a4dd244d0fb
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/NetworkManager-openconnect.bst b/elements/vm/NetworkManager-openconnect.bst
index 1cc1fb547..ea9376be6 100644
--- a/elements/vm/NetworkManager-openconnect.bst
+++ b/elements/vm/NetworkManager-openconnect.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:NetworkManager-openconnect/1.2/NetworkManager-openconnect-1.2.6.tar.xz
+  ref: 95109803596a9782680a5dca3b51c4ad8ff7e126169d5431278cab694112975a
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/NetworkManager-openvpn.bst b/elements/vm/NetworkManager-openvpn.bst
index 3da60ef91..8701f6764 100644
--- a/elements/vm/NetworkManager-openvpn.bst
+++ b/elements/vm/NetworkManager-openvpn.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:NetworkManager-openvpn/1.8/NetworkManager-openvpn-1.8.16.tar.xz
+  ref: 8920de09c7ae5f1f520c83f844455db8faec31427350268fe2dd95b860f91fb5
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/NetworkManager-vpnc.bst b/elements/vm/NetworkManager-vpnc.bst
index c7dddd056..5406766d1 100644
--- a/elements/vm/NetworkManager-vpnc.bst
+++ b/elements/vm/NetworkManager-vpnc.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:NetworkManager-vpnc/1.2/NetworkManager-vpnc-1.2.6.tar.xz
+  ref: de4fd059c4c08365a40b32b6f6fad9674f556724b4bbeb1f9d4473ac19a745cb
 
 variables:
   conf-local: >-
diff --git a/elements/vm/android-udev-rules.bst b/elements/vm/android-udev-rules.bst
index a20dcbaae..e0dd00bb0 100644
--- a/elements/vm/android-udev-rules.bst
+++ b/elements/vm/android-udev-rules.bst
@@ -3,6 +3,7 @@ kind: manual
 sources:
 - kind: tar
   url: github_files:M0Rf30/android-udev-rules/archive/20210425.tar.gz
+  ref: bf0456fff58d0246b505c18b215ef198820c44fdff9e671d586951ee1049f880
 
 build-depends:
 - freedesktop-sdk.bst:components/pkg-config.bst
diff --git a/elements/vm/anthy.bst b/elements/vm/anthy.bst
index 7c4649813..25d95b03c 100644
--- a/elements/vm/anthy.bst
+++ b/elements/vm/anthy.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: debian_salsa:debian/anthy/-/archive/upstream/0.4/anthy-upstream-0.4.tar.bz2
+  ref: f9d5c80d657fcf05f1bcd45b2372df59e28c582b57f32caa0bebf0fccd52061f
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/buildstream/arpy.bst b/elements/vm/buildstream/arpy.bst
index 1abb914b5..8bbb8483a 100644
--- a/elements/vm/buildstream/arpy.bst
+++ b/elements/vm/buildstream/arpy.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:b4/2d/9a1fb66d3632a4646f52cf4d75cda1f14bf6fb74f1bf322236de347523e8/arpy-2.2.0.tar.gz
+  ref: e07dfefc4cdf3d8b080e4b37e8c2b8360e7741b10faf6528f820b74999e0e6bc
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/breezy.bst b/elements/vm/buildstream/breezy.bst
index 91910dc55..ddf958f4a 100644
--- a/elements/vm/buildstream/breezy.bst
+++ b/elements/vm/buildstream/breezy.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:e4/93/101bb70d7e6c171c7a3a99d50d9f9b64a17a5845cfd6c8ecb95d844bac68/breezy-3.2.1.tar.gz
+  ref: e0b268eb1a28a2af045280c37d021ae32d7ff175f4c9b99f33aad7db0b29d85c
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/bst-external.bst b/elements/vm/buildstream/bst-external.bst
index a6cdb33a1..5f215b483 100644
--- a/elements/vm/buildstream/bst-external.bst
+++ b/elements/vm/buildstream/bst-external.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gitlab:BuildStream/bst-external.git
   track: 0.28.1
+  ref: 0.28.1-0-gc1047827cb32837a8b27cdcbdd093be9aeabde8e
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/buildstream.bst b/elements/vm/buildstream/buildstream.bst
index 38263761c..0d4eed18a 100644
--- a/elements/vm/buildstream/buildstream.bst
+++ b/elements/vm/buildstream/buildstream.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:4b/c2/de49651492a507d1983f06c365fd38ca47dd35eea390c10fdf17478780ad/BuildStream-1.6.6.tar.gz
+  ref: 5f35c1f8361fc30367128fef12a3e82e02f5018ef12557a39c5ec9ad9a60de93
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/click.bst b/elements/vm/buildstream/click.bst
index 02202753c..2f868da8f 100644
--- a/elements/vm/buildstream/click.bst
+++ b/elements/vm/buildstream/click.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:27/6f/be940c8b1f1d69daceeb0032fee6c34d7bd70e3e649ccac0951500b4720e/click-7.1.2.tar.gz
+  ref: d2b5255c7c6349bc1bd1e59e08cd12acbbd63ce649f2588755783aa94dfb6b1a
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/grpcio.bst b/elements/vm/buildstream/grpcio.bst
index 98021feff..1970701c9 100644
--- a/elements/vm/buildstream/grpcio.bst
+++ b/elements/vm/buildstream/grpcio.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:a0/d6/d04c6550debe23e2eaef0d9c4adccbb6e20d8cce6da40ae989fe8836e287/grpcio-1.37.1.tar.gz
+  ref: df8305806311d3fe913d4f7eb3ef28e2072159ea12f95baab5d447f1380a71e3
 
 build-depends:
 - freedesktop-sdk.bst:components/cython.bst
diff --git a/elements/vm/buildstream/pluginbase.bst b/elements/vm/buildstream/pluginbase.bst
index 85fa43339..b15c1d430 100644
--- a/elements/vm/buildstream/pluginbase.bst
+++ b/elements/vm/buildstream/pluginbase.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:3d/3c/fe974b4f835f83cc46966e04051f8708b7535bac28fbc0dcca1ee0c237b8/pluginbase-1.0.0.tar.gz
+  ref: 497894df38d0db71e1a4fbbfaceb10c3ef49a3f95a0582e11b75f8adaa030005
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/psutil.bst b/elements/vm/buildstream/psutil.bst
index 3f58aef82..b18356157 100644
--- a/elements/vm/buildstream/psutil.bst
+++ b/elements/vm/buildstream/psutil.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:e1/b0/7276de53321c12981717490516b7e612364f2cb372ee8901bd4a66a000d7/psutil-5.8.0.tar.gz
+  ref: 0c9ccb99ab76025f2f0bbecf341d4656e9c1351db8cc8a03ccd62e318ab4b5c6
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/pytest-runner.bst b/elements/vm/buildstream/pytest-runner.bst
index 67289ba4b..758a57312 100644
--- a/elements/vm/buildstream/pytest-runner.bst
+++ b/elements/vm/buildstream/pytest-runner.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:62/6d/681466a726a851faf4a175d0d73675cc19470a31be414e7f46fc776027e5/pytest-runner-5.3.0.tar.gz
+  ref: ca3f58ff4957e8be6c54c55d575b235725cbbcf4dc0d5091c29c6444cfc8a5fe
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/python3-configobj.bst b/elements/vm/buildstream/python3-configobj.bst
index d4165ccd9..56b487644 100644
--- a/elements/vm/buildstream/python3-configobj.bst
+++ b/elements/vm/buildstream/python3-configobj.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:64/61/079eb60459c44929e684fa7d9e2fdca403f67d64dd9dbac27296be2e0fab/configobj-5.0.6.tar.gz
+  ref: a2f5650770e1c87fb335af19a9b7eb73fc05ccf22144eb68db7d00cd2bcb0902
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/python3-dulwich.bst b/elements/vm/buildstream/python3-dulwich.bst
index ec4e06f92..a118eb381 100644
--- a/elements/vm/buildstream/python3-dulwich.bst
+++ b/elements/vm/buildstream/python3-dulwich.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:de/42/c4218857c39ebc9b13c4a5c8d684e4d873ea0c680927ad1cc20e79db258a/dulwich-0.20.33.tar.gz
+  ref: 9537abef8cabee96b0c09af950661b883057879a788d98f1187b79e32fee9650
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/python3-fastimport.bst b/elements/vm/buildstream/python3-fastimport.bst
index 02bd3800f..5054069cc 100644
--- a/elements/vm/buildstream/python3-fastimport.bst
+++ b/elements/vm/buildstream/python3-fastimport.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:4b/cf/487330428bed5e21915835096831cfe5fd30d2e68383c33d058a729f8ea3/fastimport-0.9.11.tar.gz
+  ref: ec81ddc3148f35ac5c77cce894995cf2ad66028831b73327190e1363a5f049d9
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/python3-patiencediff.bst 
b/elements/vm/buildstream/python3-patiencediff.bst
index dbc6031f8..fbc19831b 100644
--- a/elements/vm/buildstream/python3-patiencediff.bst
+++ b/elements/vm/buildstream/python3-patiencediff.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:90/ca/13cdabb3c491a0ccd7d580419b96abce3d227d4a6ba674364e6b19d4d67e/patiencediff-0.2.2.tar.gz
+  ref: 456d9fc47fe43f9aea863059ea2c6df5b997285590e4b7f9ee8fbb6c3419b5a7
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/ruamel-yaml-clib.bst b/elements/vm/buildstream/ruamel-yaml-clib.bst
index 629f29d0d..be7ab51ab 100644
--- a/elements/vm/buildstream/ruamel-yaml-clib.bst
+++ b/elements/vm/buildstream/ruamel-yaml-clib.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:8b/25/08e5ad2431a028d0723ca5540b3af6a32f58f25e83c6dda4d0fcef7288a3/ruamel.yaml.clib-0.2.6.tar.gz
+  ref: 4ff604ce439abb20794f05613c374759ce10e3595d1867764dd1ae675b85acbd
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/ruamel-yaml.bst b/elements/vm/buildstream/ruamel-yaml.bst
index efbb0a030..33fefda2a 100644
--- a/elements/vm/buildstream/ruamel-yaml.bst
+++ b/elements/vm/buildstream/ruamel-yaml.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:1d/2f/40abf6501e051df8af970bfa6d81a90fcd62dc536f82ceec80a2694a3123/ruamel.yaml-0.16.13.tar.gz
+  ref: bb48c514222702878759a05af96f4b7ecdba9b33cd4efcf25c86b882cef3a942
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/buildstream/ujson.bst b/elements/vm/buildstream/ujson.bst
index 74ff24690..e826c9ef5 100644
--- a/elements/vm/buildstream/ujson.bst
+++ b/elements/vm/buildstream/ujson.bst
@@ -3,6 +3,7 @@ kind: pip
 sources:
 - kind: tar
   url: pypi:86/0a/80d87aa4ee79980bddabef13cb7d95de330f85355cf08dfdaf874889b02b/ujson-4.0.2.tar.gz
+  ref: c615a9e9e378a7383b756b7e7a73c38b22aeb8967a8bfbffd4741f7ffd043c4d
 
 build-depends:
 - freedesktop-sdk.bst:components/python3-pip.bst
diff --git a/elements/vm/deviced.bst b/elements/vm/deviced.bst
index 85020e5a9..068512bbb 100644
--- a/elements/vm/deviced.bst
+++ b/elements/vm/deviced.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gnome_gitlab:chergert/deviced.git
   track: master
+  ref: 8bb61199a689bfc02fe07b02edda2039d1999d1f
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/vm/eos-repartition.bst b/elements/vm/eos-repartition.bst
index b6eb26969..eb7f528f5 100644
--- a/elements/vm/eos-repartition.bst
+++ b/elements/vm/eos-repartition.bst
@@ -3,6 +3,7 @@ kind: manual
 sources:
 - kind: tar
   url: github_files:endlessm/eos-boot-helper/archive/Release_3.9.4.tar.gz
+  ref: 7d64d86d199205b636206c1844ca303315ed3a2e6fbcc0f1e7a45ee1ffdd4a48
 - kind: patch
   path: files/vm/eos-repartition/fix-sector-size-issue.patch
 
diff --git a/elements/vm/fish.bst b/elements/vm/fish.bst
index 16a9413e2..88a5103c9 100644
--- a/elements/vm/fish.bst
+++ b/elements/vm/fish.bst
@@ -3,6 +3,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_files:fish-shell/fish-shell/releases/download/3.3.1/fish-3.3.1.tar.xz
+  ref: b5b4ee1a5269762cbbe993a4bd6507e675e4100ce9bbe84214a5eeb2b19fae89
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-cmake.bst
diff --git a/elements/vm/flathub-config.bst b/elements/vm/flathub-config.bst
index 06d95eb29..7e8be3ef3 100644
--- a/elements/vm/flathub-config.bst
+++ b/elements/vm/flathub-config.bst
@@ -3,6 +3,7 @@ kind: import
 sources:
 - kind: remote
   url: https://flathub.org/repo/flathub.flatpakrepo
+  ref: 3371dd250e61d9e1633630073fefda153cd4426f72f4afa0c3373ae2e8fea03a
 
 config:
   target: /etc/flatpak/remotes.d/
diff --git a/elements/vm/git-lfs.bst b/elements/vm/git-lfs.bst
index 313c22bea..ce1fce968 100644
--- a/elements/vm/git-lfs.bst
+++ b/elements/vm/git-lfs.bst
@@ -3,6 +3,7 @@ kind: make
 sources:
 - kind: tar
   url: github_files:git-lfs/git-lfs/releases/download/v2.13.3/git-lfs-v2.13.3.tar.gz
+  ref: f8bd7a06e61e47417eb54c3a0db809ea864a9322629b5544b78661edab17b950
 
 build-depends:
 - freedesktop-sdk.bst:components/go.bst
diff --git a/elements/vm/gnome-nightly-config.bst b/elements/vm/gnome-nightly-config.bst
index cc08288a1..1ac893bc1 100644
--- a/elements/vm/gnome-nightly-config.bst
+++ b/elements/vm/gnome-nightly-config.bst
@@ -3,6 +3,7 @@ kind: import
 sources:
 - kind: remote
   url: https://nightly.gnome.org/gnome-nightly.flatpakrepo
+  ref: ac596e5690af82cd62cbb60a56790f877a7a62e178a2b6d5b8e84b514151c983
 
 config:
   target: /etc/flatpak/remotes.d/
diff --git a/elements/vm/ibus-anthy.bst b/elements/vm/ibus-anthy.bst
index 653167a46..58a1a2063 100644
--- a/elements/vm/ibus-anthy.bst
+++ b/elements/vm/ibus-anthy.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:ibus/ibus-anthy/releases/download/1.5.12/ibus-anthy-1.5.12.tar.gz
+  ref: e9e758ddd46ae292376eab171187fa8f20630f0a57cd128a41208fdcdfdf57bb
 
 build-depends:
 - sdk/gobject-introspection.bst
diff --git a/elements/vm/ibus-hangul.bst b/elements/vm/ibus-hangul.bst
index 69a9cc842..b048800bd 100644
--- a/elements/vm/ibus-hangul.bst
+++ b/elements/vm/ibus-hangul.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:libhangul/ibus-hangul/releases/download/1.5.4/ibus-hangul-1.5.4.tar.gz
+  ref: a9f27ef9b0c03fd9f2faa327fb0a83c04098763969548b65b2f8159bed15cfe0
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/vm/ibus-libpinyin.bst b/elements/vm/ibus-libpinyin.bst
index 725d7d5de..052b06224 100644
--- a/elements/vm/ibus-libpinyin.bst
+++ b/elements/vm/ibus-libpinyin.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:libpinyin/ibus-libpinyin/releases/download/1.12.1/ibus-libpinyin-1.12.1.tar.gz
+  ref: 0c6ec935305fd1a70b9ad467a7f6b353e58ffb3d49f03e459ddec23765db51d7
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/vm/kyotocabinet.bst b/elements/vm/kyotocabinet.bst
index ce8b5dcc3..589ae6191 100644
--- a/elements/vm/kyotocabinet.bst
+++ b/elements/vm/kyotocabinet.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: dbmx:kyotocabinet/pkg/kyotocabinet-1.2.76.tar.gz
+  ref: 812a2d3f29c351db4c6f1ff29d94d7135f9e601d7cc1872ec1d7eed381d0d23c
 - kind: patch
   path: files/kyotocabinet/cpp-14.patch
 build-depends:
diff --git a/elements/vm/libhangul.bst b/elements/vm/libhangul.bst
index a7ae1ffda..50f485dc0 100644
--- a/elements/vm/libhangul.bst
+++ b/elements/vm/libhangul.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://kldp.net/hangul/release/3442-libhangul-0.1.0.tar.gz
+  ref: 5905aa5c557d8d46e190fec1afdd75babf3bc086ef286b42007572703658295a
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
 depends:
diff --git a/elements/vm/libpinyin.bst b/elements/vm/libpinyin.bst
index 4c01bc92a..c7610ac25 100644
--- a/elements/vm/libpinyin.bst
+++ b/elements/vm/libpinyin.bst
@@ -3,8 +3,10 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:libpinyin/libpinyin/releases/download/2.6.1/libpinyin-2.6.1.tar.gz
+  ref: fc42c4820c0e1609788bbfaf693dcb6265a3caf2aa963b20e7a994054a528b51
 - kind: tar
   url: sourceforge:libpinyin/models/model17.text.tar.gz
+  ref: e017278ab022bca065a744ccbbede94db8932ec3fb64592a1693627db9b662cd
   base-dir: ''
   directory: data
 
diff --git a/elements/vm/lxc.bst b/elements/vm/lxc.bst
index 53ea05668..e83e6686a 100644
--- a/elements/vm/lxc.bst
+++ b/elements/vm/lxc.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: linuxcontainers:lxc/lxc-4.0.10.tar.gz
+  ref: a10c518056d2e497bd600e4ffac2853bdeab1e835bf455a6d87cc8df128bfae9
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
@@ -16,12 +17,12 @@ depends:
 
 variables:
   conf-local: >-
-      --disable-werror
-      --with-init-script=systemd
-      --enable-seccomp
-      --enable-capabilities
-      --enable-pam
-      --with-pamdir=%{libdir}/security
+    --disable-werror
+    --with-init-script=systemd
+    --enable-seccomp
+    --enable-capabilities
+    --enable-pam
+    --with-pamdir=%{libdir}/security
 
 public:
   initial-script:
diff --git a/elements/vm/nss-mdns.bst b/elements/vm/nss-mdns.bst
index d03263377..5db963651 100644
--- a/elements/vm/nss-mdns.bst
+++ b/elements/vm/nss-mdns.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:lathiat/nss-mdns/releases/download/v0.14.1/nss-mdns-0.14.1.tar.gz
+  ref: a2094101b735cade45048764ea594bdae2bfa9399837f3c852a5b264416e9c8c
 
 runtime-depends:
 - freedesktop-sdk.bst:components/avahi.bst
diff --git a/elements/vm/ntfs-3g.bst b/elements/vm/ntfs-3g.bst
index 5401b7505..520ed8272 100644
--- a/elements/vm/ntfs-3g.bst
+++ b/elements/vm/ntfs-3g.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:tuxera/ntfs-3g/archive/refs/tags/2021.8.22.tar.gz
+  ref: 5cb9fa93bf2b9685e3f1b598861f6082786e76562989a5752c7379dbe0e989a2
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/openconnect.bst b/elements/vm/openconnect.bst
index 80bfdcd3e..b4b5f1bbe 100644
--- a/elements/vm/openconnect.bst
+++ b/elements/vm/openconnect.bst
@@ -3,10 +3,11 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.infradead.org/openconnect/download/openconnect-8.10.tar.gz
+  ref: 30e64c6eca4be47bbf1d61f53dc003c6621213738d4ea7a35e5cf1ac2de9bab1
 
 variables:
   conf-local: >-
-      --with-vpnc-script=/usr/share/vpnc-scripts
+    --with-vpnc-script=/usr/share/vpnc-scripts
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/openfortivpn.bst b/elements/vm/openfortivpn.bst
index 5b334c163..1e2ca4fd3 100644
--- a/elements/vm/openfortivpn.bst
+++ b/elements/vm/openfortivpn.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:adrienverge/openfortivpn/archive/refs/tags/v1.16.0.tar.gz
+  ref: 599b1e159a03be557242aa0e693bb7ddbadf2a4a2b3ffcf77dc15459fe7f6cd6
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/opensc.bst b/elements/vm/opensc.bst
index 127c68a79..390596901 100644
--- a/elements/vm/opensc.bst
+++ b/elements/vm/opensc.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_files:OpenSC/OpenSC/releases/download/0.22.0/opensc-0.22.0.tar.gz
+  ref: 8d4e5347195ebea332be585df61dcc470331c26969e4b0447c851fb0844c7186
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/openvpn.bst b/elements/vm/openvpn.bst
index fa1e2c3d4..20760857c 100644
--- a/elements/vm/openvpn.bst
+++ b/elements/vm/openvpn.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://swupdate.openvpn.org/community/releases/openvpn-2.5.1.tar.gz
+  ref: e9582b8e9457994bd8d50012be82c23b2f465da51460c9b2360a81da0f4e06e6
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/spice-vdagent.bst b/elements/vm/spice-vdagent.bst
index 17f149c4b..32e4d932d 100644
--- a/elements/vm/spice-vdagent.bst
+++ b/elements/vm/spice-vdagent.bst
@@ -3,6 +3,7 @@ kind: autotools
 sources:
 - kind: tar
   url: spice:releases/spice-vdagent-0.22.1.tar.bz2
+  ref: 93b0d15aca4762cc7d379b179a7101149dbaed62b72112fffb2b3e90b11687a0
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-autotools.bst
diff --git a/elements/vm/toolbox.bst b/elements/vm/toolbox.bst
index 2c6068e4b..c503a03a9 100644
--- a/elements/vm/toolbox.bst
+++ b/elements/vm/toolbox.bst
@@ -3,141 +3,169 @@ kind: meson
 sources:
 - kind: tar
   url: github_files:containers/toolbox/releases/download/0.0.99.3/toolbox-0.0.99.3.tar.xz
+  ref: c385f180e640adbad35a0019613eb5cd8973426d68ade668ec004e6565712983
 - kind: git_tag
   url: github:HarryMichal/go-version.git
   track: v1.0.0
   track-tags: false
   directory: 'src/vendor/github.com/HarryMichal/go-version'
+  ref: v1.0.0-0-g55580acf86a8aaf1c30ad94a91cfd5dd90a6b222
 - kind: git_tag
   url: github:acobaugh/osrelease.git
   track: a93a0a55a249
   track-tags: false
   directory: 'src/vendor/github.com/acobaugh/osrelease'
+  ref: a93a0a55a24912e113e21f81971dc7248de7f6e2
 - kind: git_tag
   url: github:briandowns/spinner.git
   track: v1.10.0
   track-tags: false
   directory: 'src/vendor/github.com/briandowns/spinner'
+  ref: v1.10.0-0-gdb9a25053a700cbfa2b021429cd6146205028886
 - kind: git_tag
   url: github:docker/go-units.git
   track: v0.4.0
   track-tags: false
   directory: 'src/vendor/github.com/docker/go-units'
+  ref: v0.4.0-0-g519db1ee28dcc9fd2474ae59fca29a810482bfb1
 - kind: git_tag
   url: github:fsnotify/fsnotify.git
   track: v1.4.7
   track-tags: false
   directory: 'src/vendor/github.com/fsnotify/fsnotify'
+  ref: v1.4.7-0-gc2828203cd70a50dcccfb2761f8b1f8ceef9a8e9
 - kind: git_tag
   url: github:fatih/color.git
   track: v1.7.0
   track-tags: false
   directory: 'src/vendor/github.com/fatih/color'
+  ref: v1.7.0-0-g5b77d2a35fb0ede96d138fc9a99f5c9b6aef11b4
 - kind: git_tag
   url: github:godbus/dbus.git
   track: v5.0.3
   track-tags: false
   directory: 'src/vendor/github.com/godbus/dbus/v5'
+  ref: v5.0.3-0-g37bf87eef99d69c4f1d3528bd66e3a87dc201472
 - kind: git_tag
   url: github:inconshreveable/mousetrap.git
   track: v1.0.0
   track-tags: false
   directory: 'src/vendor/github.com/inconshreveable/mousetrap'
+  ref: v1.0-0-g76626ae9c91c4f2a10f34cad8ce83ea42c93bb75
 - kind: git_tag
   url: github:konsorten/go-windows-terminal-sequences.git
   track: v1.0.1
   track-tags: false
   directory: 'src/vendor/github.com/konsorten/go-windows-terminal-sequences'
+  ref: v1.0.1-0-g5c8c8bd35d3832f5d134ae1e1e375b69a4d25242
 - kind: git_tag
   url: github:mattn/go-colorable.git
   track: v0.1.2
   track-tags: false
   directory: 'src/vendor/github.com/mattn/go-colorable'
+  ref: v0.1.2-0-g8029fb3788e5a4a9c00e415f586a6d033f5d38b3
 - kind: git_tag
   url: github:mattn/go-isatty.git
   track: v0.0.8
   track-tags: false
   directory: 'src/vendor/github.com/mattn/go-isatty'
+  ref: v0.0.8-0-g1311e847b0cb909da63b5fecfb5370aa66236465
 - kind: git_tag
   url: github:sirupsen/logrus.git
   track: v1.4.2
   track-tags: false
   directory: 'src/vendor/github.com/sirupsen/logrus'
+  ref: v1.4.2-0-g839c75faf7f98a33d445d181f3018b5c3409a45e
 - kind: git_tag
   url: github:spf13/cobra.git
   track: v0.0.5
   track-tags: false
   directory: 'src/vendor/github.com/spf13/cobra'
+  ref: 0.0.5-0-gf2b07da1e2c38d5f12845a4f607e2e1018cbb1f5
 - kind: git_tag
   url: github:spf13/pflag.git
   track: v1.0.3
   track-tags: false
   directory: 'src/vendor/github.com/spf13/pflag'
+  ref: v1.0.3-0-g298182f68c66c05229eb03ac171abe6e309ee79a
 - kind: git_tag
   url: github:golang/crypto.git
   track: 505ab145d0a9
   track-tags: false
   directory: 'src/vendor/golang.org/x/crypto'
+  ref: 505ab145d0a99da450461ae2c1a9f6cd10d1f447
 - kind: git_tag
   url: github:golang/sys.git
   track: 953cdadca894
   track-tags: false
   directory: 'src/vendor/golang.org/x/sys'
+  ref: 953cdadca894cdc07be76fc99f95b40c28f06623
 - kind: git_tag
   url: github:golang/text.git
   track: v0.3.0
   track-tags: false
   directory: 'src/vendor/golang.org/x/text'
+  ref: v0.3.0-0-gf21a4dfb5e38f5895301dc265a8def02365cc3d0
 - kind: git_tag
   url: github:go-yaml/yaml.git
   track: v2.2.2
   track-tags: false
   directory: 'src/vendor/gopkg.in/yaml.v2'
+  ref: v2.2.2-0-g51d6538a90f86fe93ac480b35f37b2be17fef232
 - kind: git_tag
   url: github:spf13/viper.git
   track: v1.3.2
   track-tags: false
   directory: 'src/vendor/github.com/spf13/viper'
+  ref: v1.3.2-0-g9e56dacc08fbbf8c9ee2dbc717553c758ce42bc9
 - kind: git_tag
   url: github:stretchr/testify.git
   track: v1.7.0
   track-tags: false
   directory: 'src/vendor/github.com/stretchr/testify'
+  ref: v1.7.0-0-gacba37e5db06f0093b465a7d47822bf13644b66c
 - kind: git_tag
   url: github:spf13/jwalterweatherman.git
   track: v1.0.0
   track-tags: false
   directory: 'src/vendor/github.com/spf13/jwalterweatherman'
+  ref: v1.0.0-0-g4a4406e478ca629068e7768fc33f3f044173c0a6
 - kind: git_tag
   url: github:spf13/cast.git
   track: v1.3.0
   track-tags: false
   directory: 'src/vendor/github.com/spf13/cast'
+  ref: v1.3.0-0-g8c9545af88b134710ab1cd196795e7f2388358d7
 - kind: git_tag
   url: github:spf13/afero.git
   track: v1.1.2
   track-tags: false
   directory: 'src/vendor/github.com/spf13/afero'
+  ref: v1.1.2-0-gd40851caa0d747393da1ffb28f7f9d8b4eeffebd
 - kind: git_tag
   url: github:pelletier/go-toml.git
   track: v1.2.0
   track-tags: false
   directory: 'src/vendor/github.com/pelletier/go-toml'
+  ref: v1.2.0-0-gc01d1270ff3e442a8a57cddc1c92dc1138598194
 - kind: git_tag
   url: github:mitchellh/mapstructure.git
   track: v1.1.2
   track-tags: false
   directory: 'src/vendor/github.com/mitchellh/mapstructure'
+  ref: v1.1.2-0-g3536a929edddb9a5b34bd6861dc4a9647cb459fe
 - kind: git_tag
   url: github:magiconair/properties.git
   track: v1.8.0
   track-tags: false
   directory: 'src/vendor/github.com/magiconair/properties'
+  ref: v1.8.0-0-gc2353362d570a7bfa228149c62842019201cfb71
 - kind: git_tag
   url: github:hashicorp/hcl.git
   track: v1.0.0
   track-tags: false
   directory: 'src/vendor/github.com/hashicorp/hcl'
+  ref: v1.0.0-0-g8cb6e5b959231cc1119e43259c4a608f9c51a241
 
 build-depends:
 - freedesktop-sdk.bst:components/systemd.bst
diff --git a/elements/vm/uresourced.bst b/elements/vm/uresourced.bst
index aa8d63e0a..4c40184ec 100644
--- a/elements/vm/uresourced.bst
+++ b/elements/vm/uresourced.bst
@@ -3,6 +3,7 @@ kind: meson
 sources:
 - kind: tar
   url: freedesktop:benzea/uresourced/-/archive/v0.4.0/uresourced-v0.4.0.tar.bz2
+  ref: c2903ac0a621c51f661bf0a1c14a75c1c4169e1d8549f6049ef3cce07f5a6f97
 
 build-depends:
 - freedesktop-sdk.bst:public-stacks/buildsystem-meson.bst
diff --git a/elements/vm/vpnc-scripts.bst b/elements/vm/vpnc-scripts.bst
index b26cd5555..24b90b97c 100644
--- a/elements/vm/vpnc-scripts.bst
+++ b/elements/vm/vpnc-scripts.bst
@@ -4,6 +4,7 @@ sources:
 - kind: git_tag
   url: gitlab:openconnect/vpnc-scripts.git
   track: master
+  ref: fc87e1128ad181040a47ec83410146eb6f048028
 
 config:
   install-commands:
diff --git a/elements/vm/vpnc.bst b/elements/vm/vpnc.bst
index 72385f62c..3c246c133 100644
--- a/elements/vm/vpnc.bst
+++ b/elements/vm/vpnc.bst
@@ -5,6 +5,7 @@ sources:
   url: github:streambinder/vpnc.git
   track: 43780cecd7a61668002f73b6f8b9f9ba61af74ad
   track-tags: false
+  ref: 43780cecd7a61668002f73b6f8b9f9ba61af74ad
 
 variables:
   make-args: >-
diff --git a/project.conf b/project.conf
index c8a892996..7a8fb413c 100644
--- a/project.conf
+++ b/project.conf
@@ -7,9 +7,6 @@ format-version: 18
 # Where elements are stored
 element-path: elements
 
-# Store source refs in central project.refs file
-ref-storage: project.refs
-
 # The uri to download built artifacts from for this project
 artifacts:
 - url: https://m1-xlarge-x86.gnome.org:11003


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]