chore: pin git dependencies to specific revs

[DaniPopes]

Closes #4537

[codecov]

Codecov Report

Merging #4552 (a5fc1db) into main (692a081) will decrease coverage by 0.04%.
The diff coverage is n/a.

see 8 files with indirect coverage changes

Flag	Coverage Δ
integration-tests	16.74% <ø> (-0.01%)	⬇️
unit-tests	63.96% <ø> (-0.04%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Components	Coverage Δ
reth binary	30.83% <ø> (ø)
blockchain tree	83.58% <ø> (ø)
pipeline	90.56% <ø> (ø)
storage (db)	75.32% <ø> (ø)
trie	94.84% <ø> (-0.04%)	⬇️
txpool	47.50% <ø> (-0.51%)	⬇️
networking	77.53% <ø> (-0.01%)	⬇️
rpc	57.39% <ø> (-0.01%)	⬇️
consensus	63.40% <ø> (ø)
revm	31.67% <ø> (ø)
payload builder	6.34% <ø> (ø)
primitives	86.53% <ø> (-0.01%)	⬇️

[mattsse]

I think this is reasonable, even if this requires manual updates now, but if it helps to prevent issues for dependant crates sgtm

[DaniPopes]

I also pinned revm instead of using crates.io patch in ff51ac0.
This also fixes the need for users to patch as well, as long as we don't depend on other crates that depend on revm crates.io themselves.

[mattsse]

good call, getting tired of answering that question why it does not compile

[mattsse]

@DaniPopes let's switch to boa 0.17 from crates?