Can't get core package to build the desired version


My .meteor/release file indicates METEOR@, and my .meteor/versions file includes the line accounts-password@1.4.0. In the release- branch, I can click through accounts-password to the package.js file and see version: "1.4.0". The same is true for the release. But when I build the app, the package that is included in .meteor/local/build/programs/server/packages does not include @mitar’s commit. I’m trying to use Accounts.generateResetToken, and it is undefined on my server because of this. What am I missing about the way the versioning or the build works?