Sorry for the very late response. The general opinion is that people should download the moduleset they want from https://gitlab.gnome.org/GNOME/jhbuild/tree/master/modulesets/
jhbuild upstream used to keep old versioned modulesets around. Now they don't which means that the provided modulesets which target git master for each project will gradually deteriorate as upstream projects add new dependencies and local copies aren't updated. I mean someone could update jhbuild in Debian stable releases; it's just not really been done so far and isn't a high priority for us. If I don't hear back from you, we'll probably eventually close this bug. Thanks, Jeremy Bicha
