don't check hashes on releases