Now official Gemfile.lock uses rugged 0.24.0 that embeds libgit2 0.24.0 as it is, so I believe there is no worry to build with separated libgit2 0.24.0. I definitely prefer this way unless we introduce a clean way to disable automatic discovery of system libraries in cmake.