Using compatible shim and go-apex releases

TL;DR
How can it be programatically determined which releases of go-apex are compatible with which versions of https://github.com/apex/apex?

========

Is there a preferred technique for ensuring that compatible versions of https://github.com/apex/go-apex and https://github.com/apex/apex are used together?

Our pipeline automates infrastructure and app. deployment. Currently we use https://raw.githubusercontent.com/apex/apex/707e92374bbaf1de07bc29c0272b047f3972b45f/install.sh during CI which pulls master. We use https://github.com/golang/dep in our app repo to define the version of go-apex we want.

We could I suppose configure the dep to always pull the latest go-apex and hope that the latest of both are always compatible, however we would prefer to lock in compatible versions of both and upgrade explicitly as required.