We must make sure to have control over the versions of upstream projects and hence pin the git revisions. Currently, we are using plain master of infra engine which can easily break.