update SHA sums