(real) sha1 version bump