bump source headers, use protocol-relative URL