move url and sha into the stable block