bump 3.12.8
use sha512 instead of md5