update Meslo to use sha256 checksum

sha1 is deprecated