Bump HTTP SHA1