update sources and out-of-date hashes