compare md5 of downloaded files, raise exception if not the same
merge upstream