And use fetchzip instead of fetchurl towards github.com to not let this happen again. (fetchzip checks the hash on the *extracted* archive, so changes in compression algo etc. doesn't change the hash.)