New formula: cmockery2 1.3.8

How mandatory is that?  SHA1 is not well regarded, whereas SHA256 is.