pin libgd to a specific commit
libgd "doesn't guarantee API/ABI stability", so it's possible that one day they'll push a breaking change and chatty will fail to build: https://gitlab.gnome.org/GNOME/libgd
the project doesn't seem too active, so the risk is probably pretty low. but it would be an annoying surprise :)