$ git clone -n https://src.fedoraproject.org/rpms/python-oauthlib.git /var/lib/mock/f39-build-1427305-31626/root/chroot_tmpdir/scmroot/python-oauthlib
Cloning into '/var/lib/mock/f39-build-1427305-31626/root/chroot_tmpdir/scmroot/python-oauthlib'...
$ git fetch origin 4d9bf2536717d04bf4a82fe30d64b1ec3b2a15cb:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/python-oauthlib
 * [new ref]         4d9bf2536717d04bf4a82fe30d64b1ec3b2a15cb -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 4d9bf25 Update to 3.2.2 for CVE-2022-36087