The commit SHA to checkout. This value must be combined with the branch name to be valid. This takes precedence over semver.