It depends. What are you trying to achieve, really?
If you want to track the dependencies for your application, then: don’t do that. You should only ever change the dependency of your own project when you require new API/functionality.
If you want to track the dependencies because you’re packaging things, then you should look at the releases in the GNOME build.
I have a small pet project that uses Pango and interfaces it python using Cython. I just wanted to have the latest Pango, been build into a wheel, for users installation only for windows. I want to test with the recent version as well as distribute it in a wheel. What I do is download things using a python script and build it, until now I was manually updating things but today I thought of writing a script to update things and just found this inconsistency.
I don’t understand what exactly I should do here. Can you explain?
That would be because I tagged the GLib 2.67.1 release but then forgot to upload the tarball. Apologies. I’ve fixed it now. It might take a few minutes for the mirrors to update.
You can literally use whatever you want. Of course, you should steer clear of unstable/development snapshots—those are generally using an odd minor component of the version number.