Cloning the default branch of external repositories makes this test non-deterministic and likely to become flaky over time (upstream changes, force-pushes, or newer syntax than this project’s supported Python). Consider pinning each clone to a specific tag/commit (e.g., via `--branch`/`--tag` + shallow clone, or checkout a known SHA) so the smoke test remains stable and reproducible.

[steven-cutting]

Cloning the default branch of external repositories makes this test non-deterministic and likely to become flaky over time (upstream changes, force-pushes, or newer syntax than this project’s supported Python). Consider pinning each clone to a specific tag/commit (e.g., via --branch/--tag + shallow clone, or checkout a known SHA) so the smoke test remains stable and reproducible.

Originally posted by @copilot-pull-request-reviewer in #58 (comment)