For the base, only a single deps.edn is fetched using 'git show,' hence local transitive dependencies are always read in the HEAD state. You should check out the repository to the specified commit hash and then resolve it correctly.