Fix crash related to updating bundles

Since we get the failed sources by a const reference it is only live during the scope of the caller, and our use of blocks makes that scope shorter than the called block’s full scope.
Checkin release notes
Cleanup a failed GitHub upload

This might be moot given that the API should have been disabled by now.