In Guix you can never "follow upstream" in a package definition.  This
is because of the sha256 check that is done on the source, as a measure
for reproducibility.

The right course of action here is to specify the commit that builds.

Hope that helps!

-- 
Pierre Neidhardt
https://ambrevar.xyz/