( for 1.0 branch )
Since https://lab.nexedi.com/nexedi/slapos/merge_requests/258 we configured buildout to only accept pinned eggs. In fact, it's still accepting installing develop eggs and when this develop eggs have a new dependency we realize (too late) that software release was not repeatable.
After https://lab.nexedi.com/nexedi/slapos/commit/f5fc6d6db602936b30154d6e4afadb90d38d0ffb we use master branch of cloudooo, when cloudooo got a new dependency to pyPdf in https://lab.nexedi.com/nexedi/cloudooo/commit/0ff799ebcfea1013342f5450e88ff5c3b8536e89#8e2edce0d507e1297474f25c00cae94258db38d8_16_16 installation started to fail.
This MR is just about pinning the git repositories to stop the build from failing, I have not actually tried if these revisions where OK.