Turns out if you don't constrain a dependency to a revision, it picks the latest version (which I'm guessing corresponds to a git tag)
This means if you're using a fork for the sake of an extra commit that you want, you need to point at that revision (or perhaps just specify branch="master")
Otherwise we'll end up pointing at an older commit