bump and use upstream zip as src