update src url and sha1sum