?

they're hashes of the /commit/, which is the code + metadata including time + previous commit(s).