Because the we set allow-picked-versions to false in order to ensure
build reproductibility, it makes sense to also enforce code checked out
from git is checked out at a fixed revision
Check out, review, and merge locally
Step 1.
Fetch and check out the branch for this merge request