CI package jobs: workaround for git security fix