listed sha1 digests when making packaging

see https://github.com/ruby/www.ruby-lang.org/issues/921