During a meeting regarding the rollback of a third-party SDK from the latest version it was noted that the our developers already flagged in the commit history that the latest version should not be used.

Some developers argued that this was a bad practice and it should have instead been noted either in the source file (i.e. `// Don't upgrade SDK Version x.y.z, see ticket 1234`) or in a project level `README` file. Others argued that since the commit history is part of the project documentation it is an acceptable location for such information since we should all be reading it anyway. 

Should the commit history be used to convey critical information to other developers or should such information be duplicated to another location such as a project `README` or comments in the relevant source file?