$ git clone -n https://src.fedoraproject.org/rpms/apache-commons-configuration.git /var/lib/mock/f40-build-2663011-66969/root/chroot_tmpdir/scmroot/apache-commons-configuration
Cloning into '/var/lib/mock/f40-build-2663011-66969/root/chroot_tmpdir/scmroot/apache-commons-configuration'...
$ git fetch origin 6b413e4d46033b8678e6c4d9af51cdc64058eb58:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/apache-commons-configuration
 * [new ref]         6b413e4d46033b8678e6c4d9af51cdc64058eb58 -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at 6b413e4 Version 2.10.1 (CVE-2024-29131, CVE-2024-29133)