[gnome-build-meta/staging-3-30: 8/29] add missing refs

From: Abderrahim Kitouni <akitouni src gnome org>
To: commits-list gnome org
Cc:
Subject: [gnome-build-meta/staging-3-30: 8/29] add missing refs
Date: Sat, 22 Sep 2018 07:58:19 +0000 (UTC)
commit 92c1b6cc3dc6681a508f78787c1179d75ebe301d
Author: Abderrahim Kitouni <a kitouni gmail com>
Date:   Thu Sep 6 14:29:50 2018 +0100

    add missing refs

 elements/core-deps/ModemManager.bst         |   1 +
 elements/core-deps/anthy.bst                |   1 +
 elements/core-deps/argyll.bst               |   1 +
 elements/core-deps/avahi.bst                |   1 +
 elements/core-deps/berkeleydb.bst           |   1 +
 elements/core-deps/blockdev.bst             |   1 +
 elements/core-deps/boost.bst                |   1 +
 elements/core-deps/cairomm-1.0.bst          |   1 +
 elements/core-deps/cryptsetup.bst           |   1 +
 elements/core-deps/dmraid.bst               |   1 +
 elements/core-deps/dotconf.bst              |   1 +
 elements/core-deps/espeak.bst               |   1 +
 elements/core-deps/exempi.bst               |   1 +
 elements/core-deps/exiv2.bst                |   1 +
 elements/core-deps/ftjam.bst                |   1 +
 elements/core-deps/fuse.bst                 |   1 +
 elements/core-deps/gexiv2.bst               |   1 +
 elements/core-deps/gpgme.bst                |   1 +
 elements/core-deps/graphviz.bst             |   1 +
 elements/core-deps/ibus-anthy.bst           |   1 +
 elements/core-deps/ibus-hangul.bst          |   1 +
 elements/core-deps/ibus-libpinyin.bst       |   1 +
 elements/core-deps/iptables.bst             |   1 +
 elements/core-deps/json-c.bst               |   1 +
 elements/core-deps/kmod.bst                 |   1 +
 elements/core-deps/kyotocabinet.bst         |   1 +
 elements/core-deps/libatasmart.bst          |   1 +
 elements/core-deps/libbluray.bst            |   1 +
 elements/core-deps/libbytesize.bst          |   1 +
 elements/core-deps/libcdio-paranoia.bst     |   1 +
 elements/core-deps/libcdio.bst              |   1 +
 elements/core-deps/libdaemon.bst            |   1 +
 elements/core-deps/libdvdread.bst           |   1 +
 elements/core-deps/libevdev.bst             |   1 +
 elements/core-deps/libgphoto2.bst           |   1 +
 elements/core-deps/libhangul.bst            |   1 +
 elements/core-deps/libical.bst              |   1 +
 elements/core-deps/libimobiledevice.bst     |   1 +
 elements/core-deps/libmtp.bst               |   1 +
 elements/core-deps/libmusicbrainz.bst       |   1 +
 elements/core-deps/libndp.bst               |   1 +
 elements/core-deps/libnfs.bst               |   1 +
 elements/core-deps/libnl.bst                |   1 +
 elements/core-deps/liboauth.bst             |   1 +
 elements/core-deps/libpinyin.bst            |   2 +
 elements/core-deps/libsass.bst              |   1 +
 elements/core-deps/libtirpc.bst             |   1 +
 elements/core-deps/libusb.bst               |   1 +
 elements/core-deps/libusbmuxd.bst           |   1 +
 elements/core-deps/libvirt.bst              |   1 +
 elements/core-deps/libwacom.bst             |   1 +
 elements/core-deps/libxklavier.bst          |   1 +
 elements/core-deps/libyaml.bst              |   1 +
 elements/core-deps/lvm2.bst                 |   1 +
 elements/core-deps/mozjs52.bst              |   1 +
 elements/core-deps/mpc.bst                  |   1 +
 elements/core-deps/mpfr.bst                 |   1 +
 elements/core-deps/mtdev.bst                |   1 +
 elements/core-deps/neon.bst                 |   1 +
 elements/core-deps/openjpeg.bst             |   1 +
 elements/core-deps/openldap.bst             |   1 +
 elements/core-deps/parted.bst               |   1 +
 elements/core-deps/plist.bst                |   1 +
 elements/core-deps/poppler.bst              |   1 +
 elements/core-deps/popt.bst                 |   1 +
 elements/core-deps/portablexdr.bst          |   1 +
 elements/core-deps/portaudio.bst            |   1 +
 elements/core-deps/ppp.bst                  |   1 +
 elements/core-deps/pwquality.bst            |   1 +
 elements/core-deps/rpcsvc-proto.bst         |   1 +
 elements/core-deps/samba.bst                |   1 +
 elements/core-deps/sane-backends.bst        |   1 +
 elements/core-deps/sassc.bst                |   1 +
 elements/core-deps/speech-dispatcher.bst    |   1 +
 elements/core-deps/spice-gtk.bst            |   1 +
 elements/core-deps/spice-protocol.bst       |   1 +
 elements/core-deps/startup-notification.bst |   1 +
 elements/core-deps/udisks2.bst              |   1 +
 elements/core-deps/volume-key.bst           |   1 +
 elements/core-deps/xmlto.bst                |   1 +
 elements/sdk/WebKitGTK+.bst                 |   1 +
 elements/sdk/brotli.bst                     |   1 +
 elements/sdk/cantarell-fonts.bst            |   1 +
 elements/sdk/dbus-glib.bst                  |   1 +
 elements/sdk/enchant-2.bst                  |   1 +
 elements/sdk/fcitx.bst                      |   1 +
 elements/sdk/ffmpeg.bst                     |   1 +
 elements/sdk/gnome-common.bst               |   1 +
 elements/sdk/ibus.bst                       |   1 +
 elements/sdk/libcanberra.bst                |   1 +
 elements/sdk/libpsl.bst                     |   1 +
 elements/sdk/librsvg.bst                    | 120 ++++++++++++++++++++++++++++
 elements/sdk/mozjs60.bst                    |   1 +
 elements/sdk/pycairo.bst                    |   1 +
 elements/sdk/sdl2-image.bst                 |   1 +
 elements/sdk/sdl2-mixer.bst                 |   1 +
 elements/sdk/sdl2-net.bst                   |   1 +
 elements/sdk/sdl2-ttf.bst                   |   1 +
 elements/sdk/sdl2.bst                       |   1 +
 elements/sdk/vala-tarball.bst               |   1 +
 elements/sdk/woff2.bst                      |   1 +
 101 files changed, 221 insertions(+)
---
diff --git a/elements/core-deps/ModemManager.bst b/elements/core-deps/ModemManager.bst
index c91d7ae..a5cad21 100644
--- a/elements/core-deps/ModemManager.bst
+++ b/elements/core-deps/ModemManager.bst
@@ -3,6 +3,7 @@ sources:
 # https://gitlab.freedesktop.org/mobile-broadband/ModemManager/issues/85
 - kind: tar
   url: https://www.freedesktop.org/software/ModemManager/ModemManager-1.8.0.tar.xz
+  ref: 18abe34421aa3b52ff47d4ba93aa282f8f8944717dd644a5c0c81eeeac9c7eb1
 depends:
 - core-deps/libgudev.bst
 - core-deps/libmbim.bst
diff --git a/elements/core-deps/anthy.bst b/elements/core-deps/anthy.bst
index 17d9211..94210fc 100644
--- a/elements/core-deps/anthy.bst
+++ b/elements/core-deps/anthy.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://http.debian.net/debian/pool/main/a/anthy/anthy_0.3.orig.tar.gz
+  ref: 5dae9f0755df76b48a7f606553dd06d85313ec77cea3724fcd2c6ebeecf53d69
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/argyll.bst b/elements/core-deps/argyll.bst
index 26a2730..5acf572 100644
--- a/elements/core-deps/argyll.bst
+++ b/elements/core-deps/argyll.bst
@@ -2,6 +2,7 @@ kind: manual
 sources:
 - kind: zip
   url: http://www.argyllcms.com/Argyll_V2.0.0_src.zip
+  ref: 5492896c040b406892864c467466ad6b50eb62954b5874ef0eb9174d1764ff41
 - kind: patch
   path: files/argyll/fix-aarch64-build.patch
 depends:
diff --git a/elements/core-deps/avahi.bst b/elements/core-deps/avahi.bst
index 29df885..5ea3baf 100644
--- a/elements/core-deps/avahi.bst
+++ b/elements/core-deps/avahi.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:lathiat/avahi/releases/download/v0.7/avahi-0.7.tar.gz
+  ref: 57a99b5dfe7fdae794e3d1ee7a62973a368e91e414bd0dfa5d84434de5b14804
 depends:
 - core-deps/libdaemon.bst
 - sdk/gtk+-3.bst
diff --git a/elements/core-deps/berkeleydb.bst b/elements/core-deps/berkeleydb.bst
index c39a333..d15ee28 100644
--- a/elements/core-deps/berkeleydb.bst
+++ b/elements/core-deps/berkeleydb.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://http.debian.net/debian/pool/main/d/db5.3/db5.3_5.3.28.orig.tar.xz
+  ref: e1f85c8b6ebd0ed3ca72fa0ae97b65006f6d0bd0cd6f4ac24bed103cb5497bf5
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/blockdev.bst b/elements/core-deps/blockdev.bst
index 05495d5..ae1f348 100644
--- a/elements/core-deps/blockdev.bst
+++ b/elements/core-deps/blockdev.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:storaged-project/libblockdev/releases/download/2.16-1/libblockdev-2.16.tar.gz
+  ref: d841ae446cf6dc545e4f7386e13dfd8c3e07c4b6a962536b7c0fcd20e3a4d9e4
 depends:
 - core-deps/cryptsetup.bst
 - core-deps/dmraid.bst
diff --git a/elements/core-deps/boost.bst b/elements/core-deps/boost.bst
index f33d76b..8808e06 100644
--- a/elements/core-deps/boost.bst
+++ b/elements/core-deps/boost.bst
@@ -2,6 +2,7 @@ kind: manual
 sources:
 - kind: tar
   url: https://dl.bintray.com/boostorg/release/1.66.0/source/boost_1_66_0.tar.bz2
+  ref: 5721818253e6a0989583192f96782c4a98eb6204965316df9f5ad75819225ca9
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/cairomm-1.0.bst b/elements/core-deps/cairomm-1.0.bst
index 39e4a15..587bcab 100644
--- a/elements/core-deps/cairomm-1.0.bst
+++ b/elements/core-deps/cairomm-1.0.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: cairo_org:releases/cairomm-1.13.1.tar.gz
+  ref: 97a78bd7de6baf8af3da1f9b39f1317f8da9f1145b7694e928fbd5521da08ef6
 depends:
 - core-deps/libsigcplusplus-2.0.bst
 - filename: desktop/cairo.bst
diff --git a/elements/core-deps/cryptsetup.bst b/elements/core-deps/cryptsetup.bst
index 32cbe02..fb05c1f 100644
--- a/elements/core-deps/cryptsetup.bst
+++ b/elements/core-deps/cryptsetup.bst
@@ -3,6 +3,7 @@ sources:
 - kind: tar
   # volume_key doesn't work with 2.x
   url: https://www.kernel.org/pub/linux/utils/cryptsetup/v1.7/cryptsetup-1.7.5.tar.xz
+  ref: 2b30cd1d0dd606a53ac77b406e1d37798d4b0762fa89de6ea546201906a251bd
 depends:
 - core-deps/json-c.bst
 - core-deps/lvm2.bst
diff --git a/elements/core-deps/dmraid.bst b/elements/core-deps/dmraid.bst
index 74896f6..1f246da 100644
--- a/elements/core-deps/dmraid.bst
+++ b/elements/core-deps/dmraid.bst
@@ -3,6 +3,7 @@ sources:
 - kind: tar
   url: tarballs_needing_help:dmraid-1.0.0.rc16-3.tar.bz2
   base-dir: dmraid/1.0.0.rc16-3/dmraid
+  ref: 93421bd169d71ff5e7d2db95b62b030bfa205a12010b6468dcdef80337d6fbd8
 depends:
 - core-deps/lvm2.bst
 - filename: base.bst
diff --git a/elements/core-deps/dotconf.bst b/elements/core-deps/dotconf.bst
index 115d993..b80df4b 100644
--- a/elements/core-deps/dotconf.bst
+++ b/elements/core-deps/dotconf.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:williamh/dotconf/archive/v1.3.tar.gz
+  ref: 7f1ecf40de1ad002a065a321582ed34f8c14242309c3547ad59710ae3c805653
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/espeak.bst b/elements/core-deps/espeak.bst
index b77ce85..98918b7 100644
--- a/elements/core-deps/espeak.bst
+++ b/elements/core-deps/espeak.bst
@@ -2,6 +2,7 @@ kind: manual
 sources:
 - kind: zip
   url: downloads.sourceforge.net:espeak/espeak/espeak-1.48/espeak-1.48.04-source.zip
+  ref: bf9a17673adffcc28ff7ea18764f06136547e97bbd9edf2ec612f09b207f0659
 depends:
 - core-deps/portaudio.bst
 - filename: base.bst
diff --git a/elements/core-deps/exempi.bst b/elements/core-deps/exempi.bst
index 7a30410..f466e54 100644
--- a/elements/core-deps/exempi.bst
+++ b/elements/core-deps/exempi.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://libopenraw.freedesktop.org/download/exempi-2.4.5.tar.bz2
+  ref: 406185feb88e84ea1d4b4251370be2991205790d7113a7e28e192ff46a4f221e
 depends:
 - core-deps/boost.bst
 - filename: base.bst
diff --git a/elements/core-deps/exiv2.bst b/elements/core-deps/exiv2.bst
index b08938b..9adaf61 100644
--- a/elements/core-deps/exiv2.bst
+++ b/elements/core-deps/exiv2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:Exiv2/exiv2/archive/v0.26.tar.gz
+  ref: 51cffa8d19d67e1da6c1d0f570a75b8f6c814113367318c2c0407691888c5f01
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/ftjam.bst b/elements/core-deps/ftjam.bst
index 4e724ce..d3a7389 100644
--- a/elements/core-deps/ftjam.bst
+++ b/elements/core-deps/ftjam.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: downloads.sourceforge.net:project/freetype/ftjam/2.5.2/ftjam-2.5.2.tar.bz2
+  ref: e89773500a92912de918e9febffabe4b6bce79d69af194435f4e032b8a6d66a3
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/fuse.bst b/elements/core-deps/fuse.bst
index 001d3ce..ec7efc8 100644
--- a/elements/core-deps/fuse.bst
+++ b/elements/core-deps/fuse.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:libfuse/libfuse/releases/download/fuse-2.9.7/fuse-2.9.7.tar.gz
+  ref: 832432d1ad4f833c20e13b57cf40ce5277a9d33e483205fc63c78111b3358874
 - kind: patch
   path: files/fuse/fuse-kernel-h-clean-includes.patch
 depends:
diff --git a/elements/core-deps/gexiv2.bst b/elements/core-deps/gexiv2.bst
index 9e43c24..0a465fa 100644
--- a/elements/core-deps/gexiv2.bst
+++ b/elements/core-deps/gexiv2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gexiv2/0.10/gexiv2-0.10.8.tar.xz
+  ref: 81c528fd1e5e03577acd80fb77798223945f043fd1d4e06920c71202eea90801
 depends:
 - core-deps/exiv2.bst
 - filename: base.bst
diff --git a/elements/core-deps/gpgme.bst b/elements/core-deps/gpgme.bst
index 5875e44..c5471a6 100644
--- a/elements/core-deps/gpgme.bst
+++ b/elements/core-deps/gpgme.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.gnupg.org/ftp/gcrypt/gpgme/gpgme-1.10.0.tar.bz2
+  ref: 1a8fed1197c3b99c35f403066bb344a26224d292afc048cfdfc4ccd5690a0693
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/graphviz.bst b/elements/core-deps/graphviz.bst
index 2345be0..459a8c3 100644
--- a/elements/core-deps/graphviz.bst
+++ b/elements/core-deps/graphviz.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://graphviz.gitlab.io/pub/graphviz/stable/SOURCES/graphviz.tar.gz
+  ref: ca5218fade0204d59947126c38439f432853543b0818d9d728c589dfe7f3a421
 depends:
 - sdk/gdk-pixbuf.bst
 - sdk/pango.bst
diff --git a/elements/core-deps/ibus-anthy.bst b/elements/core-deps/ibus-anthy.bst
index 8b95275..240e4ec 100644
--- a/elements/core-deps/ibus-anthy.bst
+++ b/elements/core-deps/ibus-anthy.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:ibus/ibus-anthy/releases/download/1.5.6/ibus-anthy-1.5.6.tar.gz
+  ref: 035c636bc884ff3131bb75aee6ec58db938d3797344687a2eb5f18542801896e
 depends:
 - core-deps/anthy.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/ibus-hangul.bst b/elements/core-deps/ibus-hangul.bst
index 89fe6cc..2fbc4ac 100644
--- a/elements/core-deps/ibus-hangul.bst
+++ b/elements/core-deps/ibus-hangul.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:choehwanjin/ibus-hangul/releases/download/1.5.0/ibus-hangul-1.5.0.tar.gz
+  ref: a22d4030bb20f73914a9d8a28c71b823123a5d1902a30f8328111af50f4f1788
 depends:
 - core-deps/libhangul.bst
 - sdk/ibus.bst
diff --git a/elements/core-deps/ibus-libpinyin.bst b/elements/core-deps/ibus-libpinyin.bst
index 403faae..212db9f 100644
--- a/elements/core-deps/ibus-libpinyin.bst
+++ b/elements/core-deps/ibus-libpinyin.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:libpinyin/ibus-libpinyin/archive/1.9.0.tar.gz
+  ref: c8ec2450cec6f11870982b0130293dc967632631077029ca76c27ef349189e3e
 depends:
 - core-deps/libpinyin.bst
 - sdk/ibus.bst
diff --git a/elements/core-deps/iptables.bst b/elements/core-deps/iptables.bst
index be6b867..76e1a06 100644
--- a/elements/core-deps/iptables.bst
+++ b/elements/core-deps/iptables.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tarballs_needing_help:iptables_1.6.2.orig.tar.bz2
+  ref: 55d02dfa46263343a401f297d44190f2a3e5113c8933946f094ed40237053733
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/json-c.bst b/elements/core-deps/json-c.bst
index 14ead6a..ced1bbb 100644
--- a/elements/core-deps/json-c.bst
+++ b/elements/core-deps/json-c.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://s3.amazonaws.com/json-c_releases/releases/json-c-0.13.1.tar.gz
+  ref: b87e608d4d3f7bfdd36ef78d56d53c74e66ab278d318b71e6002a369d36f4873
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/kmod.bst b/elements/core-deps/kmod.bst
index 73b0fa6..7db6b15 100644
--- a/elements/core-deps/kmod.bst
+++ b/elements/core-deps/kmod.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://mirrors.edge.kernel.org/pub/linux/utils/kernel/kmod/kmod-25.tar.xz
+  ref: 7165e6496656159dcb909a91ed708a0fe273a4b128b4b1dc997ccb5189eef1cd
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/kyotocabinet.bst b/elements/core-deps/kyotocabinet.bst
index 0e949e6..bc94e8d 100644
--- a/elements/core-deps/kyotocabinet.bst
+++ b/elements/core-deps/kyotocabinet.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://fallabs.com/kyotocabinet/pkg/kyotocabinet-1.2.76.tar.gz
+  ref: 812a2d3f29c351db4c6f1ff29d94d7135f9e601d7cc1872ec1d7eed381d0d23c
 - kind: patch
   path: files/kyotocabinet/cpp-14.patch
 depends:
diff --git a/elements/core-deps/libatasmart.bst b/elements/core-deps/libatasmart.bst
index e8454d3..ccac3f8 100644
--- a/elements/core-deps/libatasmart.bst
+++ b/elements/core-deps/libatasmart.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://0pointer.de/public/libatasmart-0.19.tar.xz
+  ref: 61f0ea345f63d28ab2ff0dc352c22271661b66bf09642db3a4049ac9dbdb0f8d
 depends:
 - filename: vm/linux-vm-boot/systemd.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libbluray.bst b/elements/core-deps/libbluray.bst
index 0941807..9d3b912 100644
--- a/elements/core-deps/libbluray.bst
+++ b/elements/core-deps/libbluray.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://ftp.videolan.org/pub/videolan/libbluray/1.0.2/libbluray-1.0.2.tar.bz2
+  ref: 6d9e7c4e416f664c330d9fa5a05ad79a3fb39b95adfc3fd6910cbed503b7aeff
 depends:
 - filename: desktop/fontconfig.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libbytesize.bst b/elements/core-deps/libbytesize.bst
index 5691d95..ad1fe3d 100644
--- a/elements/core-deps/libbytesize.bst
+++ b/elements/core-deps/libbytesize.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:storaged-project/libbytesize/releases/download/1.2/libbytesize-1.2.tar.gz
+  ref: 65656ed62080d73d0f21d9647cee20533377bee150e91807fd54c502f3e1108f
 depends:
 - core-deps/mpfr.bst
 - filename: base.bst
diff --git a/elements/core-deps/libcdio-paranoia.bst b/elements/core-deps/libcdio-paranoia.bst
index 1e55c5a..ed974e4 100644
--- a/elements/core-deps/libcdio-paranoia.bst
+++ b/elements/core-deps/libcdio-paranoia.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:libcdio/libcdio-paranoia-10.2+0.94+2.tar.gz
+  ref: d60f82ece97eeb92407a9ee03f3499c8983206672c28ae5e4e22179063c81941
 depends:
 - core-deps/libcdio.bst
 - filename: base.bst
diff --git a/elements/core-deps/libcdio.bst b/elements/core-deps/libcdio.bst
index 3028044..9a40272 100644
--- a/elements/core-deps/libcdio.bst
+++ b/elements/core-deps/libcdio.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:libcdio/libcdio-2.0.0.tar.gz
+  ref: 1b481b5da009bea31db875805665974e2fc568e2b2afa516f4036733657cf958
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libdaemon.bst b/elements/core-deps/libdaemon.bst
index 26ccc66..a554747 100644
--- a/elements/core-deps/libdaemon.bst
+++ b/elements/core-deps/libdaemon.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://0pointer.de/lennart/projects/libdaemon/libdaemon-0.14.tar.gz
+  ref: fd23eb5f6f986dcc7e708307355ba3289abe03cc381fc47a80bca4a50aa6b834
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libdvdread.bst b/elements/core-deps/libdvdread.bst
index b632b95..7556135 100644
--- a/elements/core-deps/libdvdread.bst
+++ b/elements/core-deps/libdvdread.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://download.videolan.org/pub/videolan/libdvdread/6.0.0/libdvdread-6.0.0.tar.bz2
+  ref: b33b1953b4860545b75f6efc06e01d9849e2ea4f797652263b0b4af6dd10f935
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libevdev.bst b/elements/core-deps/libevdev.bst
index 994c6b0..96fdb5f 100644
--- a/elements/core-deps/libevdev.bst
+++ b/elements/core-deps/libevdev.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/libevdev/libevdev-1.5.6.tar.xz
+  ref: ecec7e9d66b1d3692f10b3b20aa97fb25e874a784c5552a7b1698091fef5a688
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libgphoto2.bst b/elements/core-deps/libgphoto2.bst
index 181d657..30edb93 100644
--- a/elements/core-deps/libgphoto2.bst
+++ b/elements/core-deps/libgphoto2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: downloads.sourceforge.net:gphoto/libgphoto/2.5.16/libgphoto2-2.5.16.tar.bz2
+  ref: e757416d1623e01a9d0d294b2e790162e434c0964f50d3b7ff1a3424b62a2906
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libhangul.bst b/elements/core-deps/libhangul.bst
index 970161e..190ddf1 100644
--- a/elements/core-deps/libhangul.bst
+++ b/elements/core-deps/libhangul.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://kldp.net/hangul/release/3442-libhangul-0.1.0.tar.gz
+  ref: 5905aa5c557d8d46e190fec1afdd75babf3bc086ef286b42007572703658295a
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libical.bst b/elements/core-deps/libical.bst
index ca06a76..fd472cc 100644
--- a/elements/core-deps/libical.bst
+++ b/elements/core-deps/libical.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:libical/libical/releases/download/v3.0.3/libical-3.0.3.tar.gz
+  ref: 5b91eb8ad2d2dcada39d2f81d5e3ac15895823611dc7df91df39a35586f39241
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libimobiledevice.bst b/elements/core-deps/libimobiledevice.bst
index 9d49432..cd36c82 100644
--- a/elements/core-deps/libimobiledevice.bst
+++ b/elements/core-deps/libimobiledevice.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://www.libimobiledevice.org/downloads/libimobiledevice-1.2.0.tar.bz2
+  ref: 786b0de0875053bf61b5531a86ae8119e320edab724fc62fe2150cc931f11037
 depends:
 - core-deps/libusbmuxd.bst
 - filename: base.bst
diff --git a/elements/core-deps/libmtp.bst b/elements/core-deps/libmtp.bst
index b457e8a..70ca440 100644
--- a/elements/core-deps/libmtp.bst
+++ b/elements/core-deps/libmtp.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: downloads.sourceforge.net:libmtp/libmtp/1.1.15/libmtp-1.1.15.tar.gz
+  ref: d040900b46757e311b1fb3bfa8c05db09c8b6811e044bce8c88c9f3f6d3a3021
 depends:
 - core-deps/libusb.bst
 - filename: base.bst
diff --git a/elements/core-deps/libmusicbrainz.bst b/elements/core-deps/libmusicbrainz.bst
index 56367ab..f57e808 100644
--- a/elements/core-deps/libmusicbrainz.bst
+++ b/elements/core-deps/libmusicbrainz.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:metabrainz/libmusicbrainz/releases/download/release-5.1.0/libmusicbrainz-5.1.0.tar.gz
+  ref: 6749259e89bbb273f3f5ad7acdffb7c47a2cf8fcaeab4c4695484cef5f4c6b46
 # this patch has been merged upstream and can be removed when this is updated
 - kind: patch
   path: files/libmusicbrainz/cmake-ninja.patch
diff --git a/elements/core-deps/libndp.bst b/elements/core-deps/libndp.bst
index 91862bd..964d315 100644
--- a/elements/core-deps/libndp.bst
+++ b/elements/core-deps/libndp.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://libndp.org/files/libndp-1.6.tar.gz
+  ref: 0c7dfa84e013bd5e569ef2c6292a6f72cfaf14f4ff77a77425e52edc33ffac0e
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libnfs.bst b/elements/core-deps/libnfs.bst
index c9022c4..0fe0d82 100644
--- a/elements/core-deps/libnfs.bst
+++ b/elements/core-deps/libnfs.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://sites.google.com/site/libnfstarballs/li/libnfs-2.0.0.tar.gz
+  ref: 6eaeb85559bb3e378284688f06fc56b018d324a5fc69f3f5259d24593ad113cf
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libnl.bst b/elements/core-deps/libnl.bst
index 9d7a6e1..6bef338 100644
--- a/elements/core-deps/libnl.bst
+++ b/elements/core-deps/libnl.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:thom311/libnl/releases/download/libnl3_4_0/libnl-3.4.0.tar.gz
+  ref: b7287637ae71c6db6f89e1422c995f0407ff2fe50cecd61a312b6a9b0921f5bf
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/liboauth.bst b/elements/core-deps/liboauth.bst
index 853973b..dfcdc41 100644
--- a/elements/core-deps/liboauth.bst
+++ b/elements/core-deps/liboauth.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: downloads.sourceforge.net:liboauth/liboauth-1.0.3.tar.gz
+  ref: 0df60157b052f0e774ade8a8bac59d6e8d4b464058cc55f9208d72e41156811f
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libpinyin.bst b/elements/core-deps/libpinyin.bst
index 52efccc..8d5ef3f 100644
--- a/elements/core-deps/libpinyin.bst
+++ b/elements/core-deps/libpinyin.bst
@@ -2,10 +2,12 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:libpinyin/libpinyin/archive/2.0.0.tar.gz
+  ref: 0b78b483c179f6998a0df582aea3d77340bb1e9d887b52ed8fae677d535fd19d
 - kind: tar
   url: downloads.sourceforge.net:libpinyin/models/model14.text.tar.gz
   base-dir: ''
   directory: data
+  ref: 185f0f175a90bcfc55cf3cf6ceff8d447a6269492c0ca1a1fc0748ea2c181363
 depends:
 - core-deps/kyotocabinet.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/libsass.bst b/elements/core-deps/libsass.bst
index e88a9bb..f55f23a 100644
--- a/elements/core-deps/libsass.bst
+++ b/elements/core-deps/libsass.bst
@@ -7,3 +7,4 @@ depends:
 sources:
 - kind: tar
   url: https://github.com/sass/libsass/archive/3.5.0.tar.gz
+  ref: 9d499927329c7f8816ab67c571fb7cc0ea21d38c6f47c7c58c98de99ef7645eb
diff --git a/elements/core-deps/libtirpc.bst b/elements/core-deps/libtirpc.bst
index fb6e3d1..3f95981 100644
--- a/elements/core-deps/libtirpc.bst
+++ b/elements/core-deps/libtirpc.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: downloads.sourceforge.net:project/libtirpc/libtirpc/1.0.3/libtirpc-1.0.3.tar.bz2
+  ref: 86c3a78fc1bddefa96111dd233124c703b22a78884203c55c3e06b3be6a0fd5e
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libusb.bst b/elements/core-deps/libusb.bst
index 192b488..c5866e5 100644
--- a/elements/core-deps/libusb.bst
+++ b/elements/core-deps/libusb.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:libusb/libusb/releases/download/v1.0.21/libusb-1.0.21.tar.bz2
+  ref: 7dce9cce9a81194b7065ee912bcd55eeffebab694ea403ffb91b67db66b1824b
 depends:
 - filename: vm/linux-vm-boot/systemd.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libusbmuxd.bst b/elements/core-deps/libusbmuxd.bst
index 204ee05..7a02bd9 100644
--- a/elements/core-deps/libusbmuxd.bst
+++ b/elements/core-deps/libusbmuxd.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://www.libimobiledevice.org/downloads/libusbmuxd-1.0.10.tar.bz2
+  ref: 1aa21391265d2284ac3ccb7cf278126d10d354878589905b35e8102104fec9f2
 depends:
 - core-deps/plist.bst
 - filename: base.bst
diff --git a/elements/core-deps/libvirt.bst b/elements/core-deps/libvirt.bst
index 9a6c066..b2506c4 100644
--- a/elements/core-deps/libvirt.bst
+++ b/elements/core-deps/libvirt.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://libvirt.org/sources/libvirt-4.1.0.tar.xz
+  ref: 8a2fa4826f311a936be8b7d4c8d76516c29417a593b1d1bb8641a8caaa316439
 depends:
 - core-deps/libnl.bst
 - core-deps/libtirpc.bst
diff --git a/elements/core-deps/libwacom.bst b/elements/core-deps/libwacom.bst
index 8459977..acb0d1f 100644
--- a/elements/core-deps/libwacom.bst
+++ b/elements/core-deps/libwacom.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: sourceforge_net:linuxwacom/files/libwacom/libwacom-0.23.tar.bz2
+  ref: a08ac59ff26dbdf5888a6ad7bd97a66741807cda6bb1c7e7f299a555129c3162
 depends:
 - core-deps/libgudev.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/libxklavier.bst b/elements/core-deps/libxklavier.bst
index f5c9a37..138e1a7 100644
--- a/elements/core-deps/libxklavier.bst
+++ b/elements/core-deps/libxklavier.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: people_freedesktop_org:~svu/libxklavier-5.4.tar.bz2
+  ref: 17a34194df5cbcd3b7bfd0f561d95d1f723aa1c87fca56bc2c209514460a9320
 depends:
 - sdk/gobject-introspection.bst
 - filename: desktop/xorg-app-xkbcomp.bst
diff --git a/elements/core-deps/libyaml.bst b/elements/core-deps/libyaml.bst
index 49be6b0..1a8c026 100644
--- a/elements/core-deps/libyaml.bst
+++ b/elements/core-deps/libyaml.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://github.com/yaml/libyaml/archive/0.1.7.tar.gz
+  ref: e1884d0fa1eec8cf869ac6bebbf25391e81956aa2970267f974a9fa5e0b968e2
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/lvm2.bst b/elements/core-deps/lvm2.bst
index c933b0e..226ba99 100644
--- a/elements/core-deps/lvm2.bst
+++ b/elements/core-deps/lvm2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.sourceware.org/pub/lvm2/LVM2.2.02.177.tgz
+  ref: 4025a23ec9b15c2cb7486d151c29dc953b75efc4d452cfe9dbbc7c0fac8e80f2
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/mozjs52.bst b/elements/core-deps/mozjs52.bst
index 3aa9018..f0a7761 100644
--- a/elements/core-deps/mozjs52.bst
+++ b/elements/core-deps/mozjs52.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_download:teams/releng/tarballs-needing-help/mozjs/mozjs-52.2.1gnome1.tar.gz
+  ref: 31697943b1dbbb51ba9aee35b8269a353c487d7af4d336010b90054dc4f9b0af
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/mpc.bst b/elements/core-deps/mpc.bst
index 42d1cf8..c73a53e 100644
--- a/elements/core-deps/mpc.bst
+++ b/elements/core-deps/mpc.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:mpc/mpc-1.1.0.tar.gz
+  ref: 6985c538143c1208dcb1ac42cedad6ff52e267b47e5f970183a3e75125b43c2e
 depends:
 - core-deps/mpfr.bst
 - filename: base.bst
diff --git a/elements/core-deps/mpfr.bst b/elements/core-deps/mpfr.bst
index c2d3a56..690abe1 100644
--- a/elements/core-deps/mpfr.bst
+++ b/elements/core-deps/mpfr.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:mpfr/mpfr-4.0.1.tar.xz
+  ref: 67874a60826303ee2fb6affc6dc0ddd3e749e9bfcb4c8655e3953d0458a6e16e
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/mtdev.bst b/elements/core-deps/mtdev.bst
index c21c951..666e1ad 100644
--- a/elements/core-deps/mtdev.bst
+++ b/elements/core-deps/mtdev.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://bitmath.org/code/mtdev/mtdev-1.1.5.tar.bz2
+  ref: 6677d5708a7948840de734d8b4675d5980d4561171c5a8e89e54adf7a13eba7f
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/neon.bst b/elements/core-deps/neon.bst
index 189c577..7304b2d 100644
--- a/elements/core-deps/neon.bst
+++ b/elements/core-deps/neon.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://http.debian.net/debian/pool/main/n/neon27/neon27_0.30.2.orig.tar.gz
+  ref: db0bd8cdec329b48f53a6f00199c92d5ba40b0f015b153718d1b15d3d967fbca
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/openjpeg.bst b/elements/core-deps/openjpeg.bst
index a7cbd37..6a14f44 100644
--- a/elements/core-deps/openjpeg.bst
+++ b/elements/core-deps/openjpeg.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:uclouvain/openjpeg/archive/v2.3.0.tar.gz
+  ref: 3dc787c1bb6023ba846c2a0d9b1f6e179f1cd255172bde9eb75b01f1e6c7d71a
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/openldap.bst b/elements/core-deps/openldap.bst
index 286f52a..1210742 100644
--- a/elements/core-deps/openldap.bst
+++ b/elements/core-deps/openldap.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://openldap.org/software/download/OpenLDAP/openldap-release/openldap-2.4.45.tgz
+  ref: cdd6cffdebcd95161a73305ec13fc7a78e9707b46ca9f84fb897cd5626df3824
 depends:
 - core-deps/berkeleydb.bst
 - filename: base.bst
diff --git a/elements/core-deps/parted.bst b/elements/core-deps/parted.bst
index 25a9481..5b9f818 100644
--- a/elements/core-deps/parted.bst
+++ b/elements/core-deps/parted.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:parted/parted-3.2.tar.xz
+  ref: 858b589c22297cacdf437f3baff6f04b333087521ab274f7ab677cb8c6bb78e4
 depends:
 - core-deps/lvm2.bst
 - filename: base.bst
diff --git a/elements/core-deps/plist.bst b/elements/core-deps/plist.bst
index 24546f2..8961b9a 100644
--- a/elements/core-deps/plist.bst
+++ b/elements/core-deps/plist.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://www.libimobiledevice.org/downloads/libplist-2.0.0.tar.bz2
+  ref: 3a7e9694c2d9a85174ba1fa92417cfabaea7f6d19631e544948dc7e17e82f602
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/poppler.bst b/elements/core-deps/poppler.bst
index 3c5a46d..6fb663f 100644
--- a/elements/core-deps/poppler.bst
+++ b/elements/core-deps/poppler.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: https://poppler.freedesktop.org/poppler-0.62.0.tar.xz
+  ref: 5b9a73dfd4d6f61d165ada1e4f0abd2d420494bf9d0b1c15d0db3f7b83a729c6
 depends:
 - core-deps/openjpeg.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/popt.bst b/elements/core-deps/popt.bst
index d68c1cf..ae69c8d 100644
--- a/elements/core-deps/popt.bst
+++ b/elements/core-deps/popt.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tarballs_needing_help:popt-1.16.tar.gz
+  ref: e728ed296fe9f069a0e005003c3d6b2dde3d9cad453422a10d6558616d304cc8
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/portablexdr.bst b/elements/core-deps/portablexdr.bst
index 320ac5c..647a14b 100644
--- a/elements/core-deps/portablexdr.bst
+++ b/elements/core-deps/portablexdr.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tarballs_needing_help:portablexdr-4.9.1.tar.gz
+  ref: 5cf4bdd153cf4d44eaf10b725f451d0cfadc070b4b9a9ccfb64094b8f78de72c
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/portaudio.bst b/elements/core-deps/portaudio.bst
index 57ebe15..9eb9331 100644
--- a/elements/core-deps/portaudio.bst
+++ b/elements/core-deps/portaudio.bst
@@ -3,6 +3,7 @@ kind: cmake
 sources:
 - kind: tar
   url: http://www.portaudio.com/archives/pa_stable_v190600_20161030.tgz
+  ref: f5a21d7dcd6ee84397446fa1fa1a0675bb2e8a4a6dceb4305a8404698d8d1513
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/ppp.bst b/elements/core-deps/ppp.bst
index 9a64c78..45541a5 100644
--- a/elements/core-deps/ppp.bst
+++ b/elements/core-deps/ppp.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://samba.org/ftp/ppp/ppp-2.4.7.tar.gz
+  ref: 02e0a3dd3e4799e33103f70ec7df75348c8540966ee7c948e4ed8a42bbccfb30
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/pwquality.bst b/elements/core-deps/pwquality.bst
index c85f30e..e2f688e 100644
--- a/elements/core-deps/pwquality.bst
+++ b/elements/core-deps/pwquality.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:libpwquality/libpwquality/releases/download/libpwquality-1.4.0/libpwquality-1.4.0.tar.bz2
+  ref: 1de6ff046cf2172d265a2cb6f8da439d894f3e4e8157b056c515515232fade6b
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/rpcsvc-proto.bst b/elements/core-deps/rpcsvc-proto.bst
index b012b26..3b9fc8c 100644
--- a/elements/core-deps/rpcsvc-proto.bst
+++ b/elements/core-deps/rpcsvc-proto.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:thkukuk/rpcsvc-proto/archive/v1.3.1.tar.gz
+  ref: 95219e83e11aba0abb4149d3e997e5fc8060912dde10af4d9f41fc1d79c7a919
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/samba.bst b/elements/core-deps/samba.bst
index 624142a..958ff39 100644
--- a/elements/core-deps/samba.bst
+++ b/elements/core-deps/samba.bst
@@ -2,6 +2,7 @@ kind: manual
 sources:
 - kind: tar
   url: https://download.samba.org/pub/samba/stable/samba-4.8.0.tar.gz
+  ref: 87d9b585dbd8628e79aabb6e621a94bd20a072a00762e78e0899fad22fc18fb7
 - kind: patch
   path: files/samba/fix-root-build.patch
 depends:
diff --git a/elements/core-deps/sane-backends.bst b/elements/core-deps/sane-backends.bst
index e6583d7..882a05c 100644
--- a/elements/core-deps/sane-backends.bst
+++ b/elements/core-deps/sane-backends.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: 
https://gitlab.com/sane-project/backends/uploads/a3ba9fff29253a94e84074917bff581a/sane-backends-1.0.27.tar.gz
+  ref: 293747bf37275c424ebb2c833f8588601a60b2f9653945d5a3194875355e36c9
 depends:
 - core-deps/libusb.bst
 - filename: base.bst
diff --git a/elements/core-deps/sassc.bst b/elements/core-deps/sassc.bst
index 066c00c..d0b31b8 100644
--- a/elements/core-deps/sassc.bst
+++ b/elements/core-deps/sassc.bst
@@ -8,3 +8,4 @@ depends:
 sources:
 - kind: tar
   url: https://github.com/sass/sassc/releases/download/3.4.8/sassc-3.4.8.tar.gz
+  ref: d61587b6c084a54e602650c1d845928a20c8d309a0eeec6b1d2499489867ce03
diff --git a/elements/core-deps/speech-dispatcher.bst b/elements/core-deps/speech-dispatcher.bst
index 3fc9cba..7737910 100644
--- a/elements/core-deps/speech-dispatcher.bst
+++ b/elements/core-deps/speech-dispatcher.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: speech_dispatcher:speech-dispatcher-0.8.8.tar.gz
+  ref: 3c2a89800d73403192b9d424a604f0e614c58db390428355a3b1c7c401986cf3
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/spice-gtk.bst b/elements/core-deps/spice-gtk.bst
index 9631b33..5fdc381 100644
--- a/elements/core-deps/spice-gtk.bst
+++ b/elements/core-deps/spice-gtk.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: spice:gtk/spice-gtk-0.34.tar.bz2
+  ref: e9720e01165f8451c9f3f58ad50e3afb990993b81cc2db86b3661b7ac5b976ee
 depends:
 - core-deps/phodav.bst
 - core-deps/spice-protocol.bst
diff --git a/elements/core-deps/spice-protocol.bst b/elements/core-deps/spice-protocol.bst
index 2b81241..6a169b9 100644
--- a/elements/core-deps/spice-protocol.bst
+++ b/elements/core-deps/spice-protocol.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: spice:releases/spice-protocol-0.12.13.tar.bz2
+  ref: 89ee11b202d2268e061788e6ace114e1ff18c7620ae64d1ca3aba252ee7c9933
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/startup-notification.bst b/elements/core-deps/startup-notification.bst
index 3df4a06..ad02ca5 100644
--- a/elements/core-deps/startup-notification.bst
+++ b/elements/core-deps/startup-notification.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://www.freedesktop.org/software/startup-notification/releases/startup-notification-0.12.tar.gz
+  ref: 3c391f7e930c583095045cd2d10eb73a64f085c7fde9d260f2652c7cb3cfbe4a
 depends:
 - filename: desktop/xcb-util.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/udisks2.bst b/elements/core-deps/udisks2.bst
index e944049..23f6c04 100644
--- a/elements/core-deps/udisks2.bst
+++ b/elements/core-deps/udisks2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:storaged-project/udisks/releases/download/udisks-2.7.6/udisks-2.7.6.tar.bz2
+  ref: 512da29063de1cd4ecbfd9182d4faea0aff40835eaac69bc9f08e20ec56d16fe
 depends:
 - core-deps/blockdev.bst
 - core-deps/libatasmart.bst
diff --git a/elements/core-deps/volume-key.bst b/elements/core-deps/volume-key.bst
index 05379c6..9b1eb93 100644
--- a/elements/core-deps/volume-key.bst
+++ b/elements/core-deps/volume-key.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://releases.pagure.org/volume_key/volume_key-0.3.9.tar.xz
+  ref: 450a54fe9bf56acec6850c1e71371d3e4913c9ca1ef0cdc3a517b4b6910412a6
 - kind: patch
   path: files/volume-key/volume_key-0.3.9-config.h.patch
 depends:
diff --git a/elements/core-deps/xmlto.bst b/elements/core-deps/xmlto.bst
index ffb4d7f..e11cd04 100644
--- a/elements/core-deps/xmlto.bst
+++ b/elements/core-deps/xmlto.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://releases.pagure.org/xmlto/xmlto-0.0.28.tar.bz2
+  ref: 1130df3a7957eb9f6f0d29e4aa1c75732a7dfb6d639be013859b5c7ec5421276
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/WebKitGTK+.bst b/elements/sdk/WebKitGTK+.bst
index 200668e..42bfac8 100644
--- a/elements/sdk/WebKitGTK+.bst
+++ b/elements/sdk/WebKitGTK+.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: webkitgtk_org:webkitgtk-2.22.2.tar.xz
+  ref: 345487d4d1896e711683f951d1e09387d3b90d7cf59295c0e634af7f515e99ba
 - kind: local
   path: files/webkitgtk/toolchain.i386
 - kind: local
diff --git a/elements/sdk/brotli.bst b/elements/sdk/brotli.bst
index 1dace5b..d94bdec 100644
--- a/elements/sdk/brotli.bst
+++ b/elements/sdk/brotli.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:google/brotli/archive/v1.0.1.tar.gz
+  ref: 6870f9c2c63ef58d7da36e5212a3e1358427572f6ac5a8b5a73a815cf3e0c4a6
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/cantarell-fonts.bst b/elements/sdk/cantarell-fonts.bst
index f8809d0..d2bb734 100644
--- a/elements/sdk/cantarell-fonts.bst
+++ b/elements/sdk/cantarell-fonts.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:cantarell-fonts/0.101/cantarell-fonts-0.101.tar.xz
+  ref: 9b9e6e824fee7a809129f2238710f09d4ef4c6fe8fd7db1969bb5e228c3f7ee5
 depends:
 - sdk/appstream-glib.bst
 - filename: base.bst
diff --git a/elements/sdk/dbus-glib.bst b/elements/sdk/dbus-glib.bst
index 8c54b04..a7407ae 100644
--- a/elements/sdk/dbus-glib.bst
+++ b/elements/sdk/dbus-glib.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://dbus.freedesktop.org/releases/dbus-glib/dbus-glib-0.110.tar.gz
+  ref: 7ce4760cf66c69148f6bd6c92feaabb8812dee30846b24cd0f7395c436d7e825
 depends:
 - filename: desktop/dbus.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/enchant-2.bst b/elements/sdk/enchant-2.bst
index 2e3b581..c7e5ac3 100644
--- a/elements/sdk/enchant-2.bst
+++ b/elements/sdk/enchant-2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:AbiWord/enchant/releases/download/v2.2.3/enchant-2.2.3.tar.gz
+  ref: abd8e915675cff54c0d4da5029d95c528362266557c61c7149d53fa069b8076d
 depends:
 - sdk/glib.bst
 - filename: desktop/hunspell.bst
diff --git a/elements/sdk/fcitx.bst b/elements/sdk/fcitx.bst
index 918fdaf..5e13cea 100644
--- a/elements/sdk/fcitx.bst
+++ b/elements/sdk/fcitx.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: https://download.fcitx-im.org/fcitx/fcitx-4.2.9.6.tar.xz
+  ref: d55eee3f094037b5c32f0c5397d585fdf932cbc7d2091ed6f78fd7a9ae512c47
 depends:
 - sdk/gtk+-3.bst
 - filename: desktop/extra-cmake-modules.bst
diff --git a/elements/sdk/ffmpeg.bst b/elements/sdk/ffmpeg.bst
index 9cbe4d0..5efea46 100644
--- a/elements/sdk/ffmpeg.bst
+++ b/elements/sdk/ffmpeg.bst
@@ -3,6 +3,7 @@ sources:
 - kind: git
   url: https://git.ffmpeg.org/ffmpeg.git
   track: n4.0.2
+  ref: fb012fd6a887085be657782b5c000769eebb5c69
 depends:
 - sdk/sdl2.bst
 - filename: desktop/fontconfig.bst
diff --git a/elements/sdk/gnome-common.bst b/elements/sdk/gnome-common.bst
index 42b8c3a..262c2b9 100644
--- a/elements/sdk/gnome-common.bst
+++ b/elements/sdk/gnome-common.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gnome-common/3.18/gnome-common-3.18.0.tar.xz
+  ref: 22569e370ae755e04527b76328befc4c73b62bfd4a572499fde116b8318af8cf
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/ibus.bst b/elements/sdk/ibus.bst
index c1ffa49..a8f6e06 100644
--- a/elements/sdk/ibus.bst
+++ b/elements/sdk/ibus.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:ibus/ibus/releases/download/1.5.17/ibus-1.5.17.tar.gz
+  ref: 0347a8055977ca458e8add750af5f9b76e1a524844cc3b0e2fad70ce153dd219
 depends:
 - sdk/dconf.bst
 - sdk/glib.bst
diff --git a/elements/sdk/libcanberra.bst b/elements/sdk/libcanberra.bst
index a92822c..1d9a4d8 100644
--- a/elements/sdk/libcanberra.bst
+++ b/elements/sdk/libcanberra.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://0pointer.de/lennart/projects/libcanberra/libcanberra-0.30.tar.xz
+  ref: c2b671e67e0c288a69fc33dc1b6f1b534d07882c2aceed37004bf48c601afa72
 depends:
 - sdk/gtk+-3.bst
 - filename: desktop/libpulse.bst
diff --git a/elements/sdk/libpsl.bst b/elements/sdk/libpsl.bst
index 6673ec4..fe1a696 100644
--- a/elements/sdk/libpsl.bst
+++ b/elements/sdk/libpsl.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:rockdaboot/libpsl/releases/download/libpsl-0.20.1/libpsl-0.20.1.tar.gz
+  ref: 95199613158dd773257ef4feccf1acdf5f791479ab4537bd984ca8598447219f
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/librsvg.bst b/elements/sdk/librsvg.bst
index a5d46d9..1564c11 100644
--- a/elements/sdk/librsvg.bst
+++ b/elements/sdk/librsvg.bst
@@ -10,244 +10,364 @@ sources:
 # it needs to be updated whenever Cargo.lock changes
 - kind: crate
   url: https://static.crates.io/crates/aho-corasick/aho-corasick-0.6.4.crate
+  ref: d6531d44de723825aa81398a6415283229725a00fa30713812ab9323faa82fc4
 - kind: crate
   url: https://static.crates.io/crates/alga/alga-0.7.0.crate
+  ref: d3d5dbb7fa6898343fd31e14e8abf2563b6c61a81c1a2e15a678a2f351a249ed
 - kind: crate
   url: https://static.crates.io/crates/ansi_term/ansi_term-0.11.0.crate
+  ref: ee49baf6cb617b853aa8d93bf420db2383fab46d314482ca2803b40d5fde979b
 - kind: crate
   url: https://static.crates.io/crates/approx/approx-0.3.0.crate
+  ref: f71f10b5c4946a64aad7b8cf65e3406cd3da22fc448595991d22423cf6db67b4
 - kind: crate
   url: https://static.crates.io/crates/arrayvec/arrayvec-0.4.7.crate
+  ref: a1e964f9e24d588183fcb43503abda40d288c8657dfc27311516ce2f05675aef
 - kind: crate
   url: https://static.crates.io/crates/atty/atty-0.2.10.crate
+  ref: 2fc4a1aa4c24c0718a250f0681885c1af91419d242f29eb8f2ab28502d80dbd1
 - kind: crate
   url: https://static.crates.io/crates/backtrace/backtrace-0.3.9.crate
+  ref: 89a47830402e9981c5c41223151efcced65a0510c13097c769cede7efb34782a
 - kind: crate
   url: https://static.crates.io/crates/backtrace-sys/backtrace-sys-0.1.23.crate
+  ref: bff67d0c06556c0b8e6b5f090f0eac52d950d9dfd1d35ba04e4ca3543eaf6a7e
 - kind: crate
   url: https://static.crates.io/crates/bitflags/bitflags-0.9.1.crate
+  ref: 4efd02e230a02e18f92fc2735f44597385ed02ad8f831e7c1c1156ee5e1ab3a5
 - kind: crate
   url: https://static.crates.io/crates/bitflags/bitflags-1.0.3.crate
+  ref: d0c54bb8f454c567f21197eefcdbf5679d0bd99f2ddbe52e84c77061952e6789
 - kind: crate
   url: https://static.crates.io/crates/byteorder/byteorder-1.2.3.crate
+  ref: 74c0b906e9446b0a2e4f760cdb3fa4b2c48cdc6db8766a845c54b6ff063fd2e9
 - kind: crate
   url: https://static.crates.io/crates/c_vec/c_vec-1.3.1.crate
+  ref: fa8f19d0a87ec08bc2925d8aa809bdd3b38d3f2c32f7b247f2cd4c56aa005ac5
 - kind: crate
   url: https://static.crates.io/crates/cairo-rs/cairo-rs-0.4.1.crate
+  ref: a110f269c2fd382df5fe8bd46dfa5f1b83608aa717fecb6e7a28c08c202f0e13
 - kind: crate
   url: https://static.crates.io/crates/cairo-sys-rs/cairo-sys-rs-0.6.0.crate
+  ref: 0395175ecba60accac076a02c31d143b9dcd9d5eb5316d7163a3273803b765c7
 - kind: crate
   url: https://static.crates.io/crates/cast/cast-0.2.2.crate
+  ref: 926013f2860c46252efceabb19f4a6b308197505082c609025aa6706c011d427
 - kind: crate
   url: https://static.crates.io/crates/cc/cc-1.0.18.crate
+  ref: 2119ea4867bd2b8ed3aecab467709720b2d55b1bcfe09f772fd68066eaf15275
 - kind: crate
   url: https://static.crates.io/crates/cfg-if/cfg-if-0.1.4.crate
+  ref: efe5c877e17a9c717a0bf3613b2709f723202c4e4675cc8f12926ded29bcb17e
 - kind: crate
   url: https://static.crates.io/crates/chrono/chrono-0.4.4.crate
+  ref: 6962c635d530328acc53ac6a955e83093fedc91c5809dfac1fa60fa470830a37
 - kind: crate
   url: https://static.crates.io/crates/clap/clap-2.32.0.crate
+  ref: b957d88f4b6a63b9d70d5f454ac8011819c6efa7727858f458ab71c756ce2d3e
 - kind: crate
   url: https://static.crates.io/crates/cloudabi/cloudabi-0.0.3.crate
+  ref: ddfc5b9aa5d4507acaf872de71051dfd0e309860e88966e1051e462a077aac4f
 - kind: crate
   url: https://static.crates.io/crates/criterion/criterion-0.2.4.crate
+  ref: b027da737a814e7ffcfdbaf1c0509fbaea4c6df5f2e116c820ecf515ad39ac9b
 - kind: crate
   url: https://static.crates.io/crates/criterion-plot/criterion-plot-0.2.4.crate
+  ref: 7894b77aa2820337ddf3a6655c24116fb7e53dbdc9735d43a4dec7da5d2c4716
 - kind: crate
   url: https://static.crates.io/crates/criterion-stats/criterion-stats-0.2.4.crate
+  ref: 61ee46663c1c4c770b215f6c412fb1e822cfb5122dbc98347dc5789613c69d2b
 - kind: crate
   url: https://static.crates.io/crates/crossbeam-deque/crossbeam-deque-0.2.0.crate
+  ref: f739f8c5363aca78cfb059edf753d8f0d36908c348f3d8d1503f03d8b75d9cf3
 - kind: crate
   url: https://static.crates.io/crates/crossbeam-epoch/crossbeam-epoch-0.3.1.crate
+  ref: 927121f5407de9956180ff5e936fe3cf4324279280001cd56b669d28ee7e9150
 - kind: crate
   url: https://static.crates.io/crates/crossbeam-utils/crossbeam-utils-0.2.2.crate
+  ref: 2760899e32a1d58d5abb31129f8fae5de75220bc2176e77ff7c627ae45c918d9
 - kind: crate
   url: https://static.crates.io/crates/cssparser/cssparser-0.24.0.crate
+  ref: 495beddc39b1987b8e9f029354eccbd5ef88eb5f1cd24badb764dce338acf2e0
 - kind: crate
   url: https://static.crates.io/crates/cssparser-macros/cssparser-macros-0.3.4.crate
+  ref: 72b64d0d64184a082f38028396875c08c8ee083481f6f16e6e0cf52c338bd785
 - kind: crate
   url: https://static.crates.io/crates/csv/csv-1.0.0.crate
+  ref: 71903184af9960c555e7f3b32ff17390d20ecaaf17d4f18c4a0993f2df8a49e3
 - kind: crate
   url: https://static.crates.io/crates/csv-core/csv-core-0.1.4.crate
+  ref: 4dd8e6d86f7ba48b4276ef1317edc8cc36167546d8972feb4a2b5fec0b374105
 - kind: crate
   url: https://static.crates.io/crates/downcast-rs/downcast-rs-1.0.3.crate
+  ref: 18df8ce4470c189d18aa926022da57544f31e154631eb4cfe796aea97051fe6c
 - kind: crate
   url: https://static.crates.io/crates/dtoa/dtoa-0.4.2.crate
+  ref: 09c3753c3db574d215cba4ea76018483895d7bff25a31b49ba45db21c48e50ab
 - kind: crate
   url: https://static.crates.io/crates/dtoa-short/dtoa-short-0.3.2.crate
+  ref: 59020b8513b76630c49d918c33db9f4c91638e7d3404a28084083b87e33f76f2
 - kind: crate
   url: https://static.crates.io/crates/either/either-1.5.0.crate
+  ref: 3be565ca5c557d7f59e7cfcf1844f9e3033650c929c6566f511e8005f205c1d0
 - kind: crate
   url: https://static.crates.io/crates/failure/failure-0.1.1.crate
+  ref: 934799b6c1de475a012a02dab0ace1ace43789ee4b99bcfbf1a2e3e8ced5de82
 - kind: crate
   url: https://static.crates.io/crates/failure_derive/failure_derive-0.1.1.crate
+  ref: c7cdda555bb90c9bb67a3b670a0f42de8e73f5981524123ad8578aafec8ddb8b
 - kind: crate
   url: https://static.crates.io/crates/float-cmp/float-cmp-0.4.0.crate
+  ref: 134a8fa843d80a51a5b77d36d42bc2def9edcb0262c914861d08129fd1926600
 - kind: crate
   url: https://static.crates.io/crates/fuchsia-zircon/fuchsia-zircon-0.3.3.crate
+  ref: 2e9763c69ebaae630ba35f74888db465e49e259ba1bc0eda7d06f4a067615d82
 - kind: crate
   url: https://static.crates.io/crates/fuchsia-zircon-sys/fuchsia-zircon-sys-0.3.3.crate
+  ref: 3dcaa9ae7725d12cdb85b3ad99a434db70b468c09ded17e012d86b5c1010f7a7
 - kind: crate
   url: https://static.crates.io/crates/generic-array/generic-array-0.11.1.crate
+  ref: 8107dafa78c80c848b71b60133954b4a58609a3a1a5f9af037ecc7f67280f369
 - kind: crate
   url: https://static.crates.io/crates/glib/glib-0.5.0.crate
+  ref: 5e0be1b1432e227bcd1a9b28db9dc1474a7e7fd4227e08e16f35304f32d09b61
 - kind: crate
   url: https://static.crates.io/crates/glib-sys/glib-sys-0.6.0.crate
+  ref: 615bef979b5838526aee99241afc80cfb2e34a8735d4bcb8ec6072598c18a408
 - kind: crate
   url: https://static.crates.io/crates/gobject-sys/gobject-sys-0.6.0.crate
+  ref: 70409d6405db8b1591602fcd0cbe8af52cd9976dd39194442b4c149ba343f86d
 - kind: crate
   url: https://static.crates.io/crates/handlebars/handlebars-0.32.4.crate
+  ref: d89ec99d1594f285d4590fc32bac5f75cdab383f1123d504d27862c644a807dd
 - kind: crate
   url: https://static.crates.io/crates/itertools/itertools-0.7.8.crate
+  ref: f58856976b776fedd95533137617a02fb25719f40e7d9b01c7043cd65474f450
 - kind: crate
   url: https://static.crates.io/crates/itertools-num/itertools-num-0.1.1.crate
+  ref: 4d78fa608383e6e608ba36f962ac991d5d6878d7203eb93b4711b14fa6717813
 - kind: crate
   url: https://static.crates.io/crates/itoa/itoa-0.4.1.crate
+  ref: c069bbec61e1ca5a596166e55dfe4773ff745c3d16b700013bcaff9a6df2c682
 - kind: crate
   url: https://static.crates.io/crates/lazy_static/lazy_static-1.0.1.crate
+  ref: e6412c5e2ad9584b0b8e979393122026cdd6d2a80b933f890dcd694ddbe73739
 - kind: crate
   url: https://static.crates.io/crates/libc/libc-0.2.42.crate
+  ref: b685088df2b950fccadf07a7187c8ef846a959c142338a48f9dc0b94517eb5f1
 - kind: crate
   url: https://static.crates.io/crates/log/log-0.4.3.crate
+  ref: 61bd98ae7f7b754bc53dca7d44b604f733c6bba044ea6f41bc8d89272d8161d2
 - kind: crate
   url: https://static.crates.io/crates/matches/matches-0.1.6.crate
+  ref: 100aabe6b8ff4e4a7e32c1c13523379802df0772b82466207ac25b013f193376
 - kind: crate
   url: https://static.crates.io/crates/matrixmultiply/matrixmultiply-0.1.14.crate
+  ref: cac1a66eab356036af85ea093101a14223dc6e3f4c02a59b7d572e5b93270bf7
 - kind: crate
   url: https://static.crates.io/crates/memchr/memchr-2.0.1.crate
+  ref: 796fba70e76612589ed2ce7f45282f5af869e0fdd7cc6199fa1aa1f1d591ba9d
 - kind: crate
   url: https://static.crates.io/crates/memoffset/memoffset-0.2.1.crate
+  ref: 0f9dc261e2b62d7a622bf416ea3c5245cdd5d9a7fcc428c0d06804dfce1775b3
 - kind: crate
   url: https://static.crates.io/crates/nalgebra/nalgebra-0.16.0.crate
+  ref: 4534bc88a178e411e634e1e44e7f2ad6e9bf062ea539f40e579bd49ef2fad056
 - kind: crate
   url: https://static.crates.io/crates/nodrop/nodrop-0.1.12.crate
+  ref: 9a2228dca57108069a5262f2ed8bd2e82496d2e074a06d1ccc7ce1687b6ae0a2
 - kind: crate
   url: https://static.crates.io/crates/num-complex/num-complex-0.2.0.crate
+  ref: 68de83578789e0fbda3fa923035be83cf8bfd3b30ccfdecd5aa89bf8601f408e
 - kind: crate
   url: https://static.crates.io/crates/num-integer/num-integer-0.1.39.crate
+  ref: e83d528d2677f0518c570baf2b7abdcf0cd2d248860b68507bdcb3e91d4c0cea
 - kind: crate
   url: https://static.crates.io/crates/num-traits/num-traits-0.1.43.crate
+  ref: 92e5113e9fd4cc14ded8e499429f396a20f98c772a47cc8622a736e1ec843c31
 - kind: crate
   url: https://static.crates.io/crates/num-traits/num-traits-0.2.5.crate
+  ref: 630de1ef5cc79d0cdd78b7e33b81f083cbfe90de0f4b2b2f07f905867c70e9fe
 - kind: crate
   url: https://static.crates.io/crates/num_cpus/num_cpus-1.8.0.crate
+  ref: c51a3322e4bca9d212ad9a158a02abc6934d005490c054a2778df73a70aa0a30
 - kind: crate
   url: https://static.crates.io/crates/owning_ref/owning_ref-0.3.3.crate
+  ref: cdf84f41639e037b484f93433aa3897863b561ed65c6e59c7073d7c561710f37
 - kind: crate
   url: https://static.crates.io/crates/pango/pango-0.4.0.crate
+  ref: 45374801e224373c3c0393cd48073c81093494c8735721e81d1dbaa4096b2767
 - kind: crate
   url: https://static.crates.io/crates/pango-sys/pango-sys-0.6.0.crate
+  ref: 94039b3921a4af4058a3e4335e5d15099101f298a92f5afc40bab3a3027594a1
 - kind: crate
   url: https://static.crates.io/crates/pangocairo/pangocairo-0.5.0.crate
+  ref: db4130d0e0567b177178c9568466277ff167cb43a245b2881e203509ea5fbd84
 - kind: crate
   url: https://static.crates.io/crates/pangocairo-sys/pangocairo-sys-0.7.0.crate
+  ref: decc9523cd5bbba49a67ed8d2ef7dfca957f4760bf420a1ea4a82634da26381c
 - kind: crate
   url: https://static.crates.io/crates/pest/pest-1.0.6.crate
+  ref: 0fce5d8b5cc33983fc74f78ad552b5522ab41442c4ca91606e4236eb4b5ceefc
 - kind: crate
   url: https://static.crates.io/crates/pest_derive/pest_derive-1.0.7.crate
+  ref: ab94faafeb93f4c5e3ce81ca0e5a779529a602ad5d09ae6d21996bfb8b6a52bf
 - kind: crate
   url: https://static.crates.io/crates/phf/phf-0.7.22.crate
+  ref: 7d37a244c75a9748e049225155f56dbcb98fe71b192fd25fd23cb914b5ad62f2
 - kind: crate
   url: https://static.crates.io/crates/phf_codegen/phf_codegen-0.7.22.crate
+  ref: 4e4048fe7dd7a06b8127ecd6d3803149126e9b33c7558879846da3a63f734f2b
 - kind: crate
   url: https://static.crates.io/crates/phf_generator/phf_generator-0.7.22.crate
+  ref: 05a079dd052e7b674d21cb31cbb6c05efd56a2cd2827db7692e2f1a507ebd998
 - kind: crate
   url: https://static.crates.io/crates/phf_shared/phf_shared-0.7.22.crate
+  ref: c2261d544c2bb6aa3b10022b0be371b9c7c64f762ef28c6f5d4f1ef6d97b5930
 - kind: crate
   url: https://static.crates.io/crates/pkg-config/pkg-config-0.3.11.crate
+  ref: 110d5ee3593dbb73f56294327fe5668bcc997897097cbc76b51e7aed3f52452f
 - kind: crate
   url: https://static.crates.io/crates/proc-macro2/proc-macro2-0.4.6.crate
+  ref: effdb53b25cdad54f8f48843d67398f7ef2e14f12c1b4cb4effc549a6462a4d6
 - kind: crate
   url: https://static.crates.io/crates/procedural-masquerade/procedural-masquerade-0.1.6.crate
+  ref: 9a1574a51c3fd37b26d2c0032b649d08a7d51d4cca9c41bbc5bf7118fa4509d0
 - kind: crate
   url: https://static.crates.io/crates/quick-error/quick-error-1.2.2.crate
+  ref: 9274b940887ce9addde99c4eee6b5c44cc494b182b97e73dc8ffdcb3397fd3f0
 - kind: crate
   url: https://static.crates.io/crates/quote/quote-0.3.15.crate
+  ref: 7a6e920b65c65f10b2ae65c831a81a073a89edd28c7cce89475bff467ab4167a
 - kind: crate
   url: https://static.crates.io/crates/quote/quote-0.6.3.crate
+  ref: e44651a0dc4cdd99f71c83b561e221f714912d11af1a4dff0631f923d53af035
 - kind: crate
   url: https://static.crates.io/crates/rand/rand-0.4.2.crate
+  ref: eba5f8cb59cc50ed56be8880a5c7b496bfd9bd26394e176bc67884094145c2c5
 - kind: crate
   url: https://static.crates.io/crates/rand/rand-0.5.4.crate
+  ref: 12397506224b2f93e6664ffc4f664b29be8208e5157d3d90b44f09b5fae470ea
 - kind: crate
   url: https://static.crates.io/crates/rand_core/rand_core-0.2.1.crate
+  ref: edecf0f94da5551fc9b492093e30b041a891657db7940ee221f9d2f66e82eef2
 - kind: crate
   url: https://static.crates.io/crates/rawpointer/rawpointer-0.1.0.crate
+  ref: ebac11a9d2e11f2af219b8b8d833b76b1ea0e054aa0e8d8e9e4cbde353bdf019
 - kind: crate
   url: https://static.crates.io/crates/rayon/rayon-1.0.2.crate
+  ref: df7a791f788cb4c516f0e091301a29c2b71ef680db5e644a7d68835c8ae6dbfa
 - kind: crate
   url: https://static.crates.io/crates/rayon-core/rayon-core-1.4.1.crate
+  ref: b055d1e92aba6877574d8fe604a63c8b5df60f60e5982bf7ccbb1338ea527356
 - kind: crate
   url: https://static.crates.io/crates/redox_syscall/redox_syscall-0.1.40.crate
+  ref: c214e91d3ecf43e9a4e41e578973adeb14b474f2bee858742d127af75a0112b1
 - kind: crate
   url: https://static.crates.io/crates/redox_termios/redox_termios-0.1.1.crate
+  ref: 7e891cfe48e9100a70a3b6eb652fef28920c117d366339687bd5576160db0f76
 - kind: crate
   url: https://static.crates.io/crates/regex/regex-1.0.1.crate
+  ref: 13c93d55961981ba9226a213b385216f83ab43bd6ac53ab16b2eeb47e337cf4e
 - kind: crate
   url: https://static.crates.io/crates/regex-syntax/regex-syntax-0.6.1.crate
+  ref: 05b06a75f5217880fc5e905952a42750bf44787e56a6c6d6852ed0992f5e1d54
 - kind: crate
   url: https://static.crates.io/crates/rustc-demangle/rustc-demangle-0.1.9.crate
+  ref: bcfe5b13211b4d78e5c2cadfebd7769197d95c639c35a50057eb4c05de811395
 - kind: crate
   url: https://static.crates.io/crates/scopeguard/scopeguard-0.3.3.crate
+  ref: 94258f53601af11e6a49f722422f6e3425c52b06245a5cf9bc09908b174f5e27
 - kind: crate
   url: https://static.crates.io/crates/serde/serde-1.0.70.crate
+  ref: 0c3adf19c07af6d186d91dae8927b83b0553d07ca56cbf7f2f32560455c91920
 - kind: crate
   url: https://static.crates.io/crates/serde_derive/serde_derive-1.0.70.crate
+  ref: 3525a779832b08693031b8ecfb0de81cd71cfd3812088fafe9a7496789572124
 - kind: crate
   url: https://static.crates.io/crates/serde_json/serde_json-1.0.24.crate
+  ref: c3c6908c7b925cd6c590358a4034de93dbddb20c45e1d021931459fd419bf0e2
 - kind: crate
   url: https://static.crates.io/crates/simplelog/simplelog-0.5.2.crate
+  ref: 9cc12b39fdf4c9a07f88bffac2d628f0118ed5ac077a4b0feece61fadf1429e5
 - kind: crate
   url: https://static.crates.io/crates/siphasher/siphasher-0.2.2.crate
+  ref: 0df90a788073e8d0235a67e50441d47db7c8ad9debd91cbf43736a2a92d36537
 - kind: crate
   url: https://static.crates.io/crates/smallvec/smallvec-0.6.3.crate
+  ref: 26df3bb03ca5eac2e64192b723d51f56c1b1e0860e7c766281f4598f181acdc8
 - kind: crate
   url: https://static.crates.io/crates/stable_deref_trait/stable_deref_trait-1.1.0.crate
+  ref: ffbc596e092fe5f598b12ef46cc03754085ac2f4d8c739ad61c4ae266cc3b3fa
 - kind: crate
   url: https://static.crates.io/crates/strsim/strsim-0.7.0.crate
+  ref: bb4f380125926a99e52bc279241539c018323fab05ad6368b56f93d9369ff550
 - kind: crate
   url: https://static.crates.io/crates/syn/syn-0.11.11.crate
+  ref: d3b891b9015c88c576343b9b3e41c2c11a51c219ef067b264bd9c8aa9b441dad
 - kind: crate
   url: https://static.crates.io/crates/syn/syn-0.14.4.crate
+  ref: 2beff8ebc3658f07512a413866875adddd20f4fd47b2a4e6c9da65cd281baaea
 - kind: crate
   url: https://static.crates.io/crates/synom/synom-0.11.3.crate
+  ref: a393066ed9010ebaed60b9eafa373d4b1baac186dd7e008555b0f702b51945b6
 - kind: crate
   url: https://static.crates.io/crates/synstructure/synstructure-0.6.1.crate
+  ref: 3a761d12e6d8dcb4dcf952a7a89b475e3a9d69e4a69307e01a470977642914bd
 - kind: crate
   url: https://static.crates.io/crates/term/term-0.5.1.crate
+  ref: 5e6b677dd1e8214ea1ef4297f85dbcbed8e8cdddb561040cc998ca2551c37561
 - kind: crate
   url: https://static.crates.io/crates/termion/termion-1.5.1.crate
+  ref: 689a3bdfaab439fd92bc87df5c4c78417d3cbe537487274e9b0b2dce76e92096
 - kind: crate
   url: https://static.crates.io/crates/textwrap/textwrap-0.10.0.crate
+  ref: 307686869c93e71f94da64286f9a9524c0f308a9e1c87a583de8e9c9039ad3f6
 - kind: crate
   url: https://static.crates.io/crates/thread-scoped/thread-scoped-1.0.2.crate
+  ref: bcbb6aa301e5d3b0b5ef639c9a9c7e2f1c944f177b460c04dc24c69b1fa2bd99
 - kind: crate
   url: https://static.crates.io/crates/thread_local/thread_local-0.3.5.crate
+  ref: 279ef31c19ededf577bfd12dfae728040a21f635b06a24cd670ff510edd38963
 - kind: crate
   url: https://static.crates.io/crates/time/time-0.1.40.crate
+  ref: d825be0eb33fda1a7e68012d51e9c7f451dc1a69391e7fdc197060bb8c56667b
 - kind: crate
   url: https://static.crates.io/crates/typenum/typenum-1.10.0.crate
+  ref: 612d636f949607bdf9b123b4a6f6d966dedf3ff669f7f045890d3a4a73948169
 - kind: crate
   url: https://static.crates.io/crates/ucd-util/ucd-util-0.1.1.crate
+  ref: fd2be2d6639d0f8fe6cdda291ad456e23629558d466e2789d2c3e9892bda285d
 - kind: crate
   url: https://static.crates.io/crates/unicode-width/unicode-width-0.1.5.crate
+  ref: 882386231c45df4700b275c7ff55b6f3698780a650026380e72dabe76fa46526
 - kind: crate
   url: https://static.crates.io/crates/unicode-xid/unicode-xid-0.0.4.crate
+  ref: 8c1f860d7d29cf02cb2f3f359fd35991af3d30bac52c57d265a3c461074cb4dc
 - kind: crate
   url: https://static.crates.io/crates/unicode-xid/unicode-xid-0.1.0.crate
+  ref: fc72304796d0818e357ead4e000d19c9c174ab23dc11093ac919054d20a6a7fc
 - kind: crate
   url: https://static.crates.io/crates/unreachable/unreachable-1.0.0.crate
+  ref: 382810877fe448991dfc7f0dd6e3ae5d58088fd0ea5e35189655f84e6814fa56
 - kind: crate
   url: https://static.crates.io/crates/utf8-ranges/utf8-ranges-1.0.0.crate
+  ref: 662fab6525a98beff2921d7f61a39e7d59e0b425ebc7d0d9e66d316e55124122
 - kind: crate
   url: https://static.crates.io/crates/vec_map/vec_map-0.8.1.crate
+  ref: 05c78687fb1a80548ae3250346c3db86a80a7cdd77bda190189f2d0a0987c81a
 - kind: crate
   url: https://static.crates.io/crates/void/void-1.0.2.crate
+  ref: 6a02e4885ed3bc0f2de90ea6dd45ebcbb66dacffe03547fadbb0eeae2770887d
 - kind: crate
   url: https://static.crates.io/crates/winapi/winapi-0.3.5.crate
+  ref: 773ef9dcc5f24b7d850d0ff101e542ff24c3b090a9768e03ff889fdef41f00fd
 - kind: crate
   url: https://static.crates.io/crates/winapi-i686-pc-windows-gnu/winapi-i686-pc-windows-gnu-0.4.0.crate
+  ref: ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6
 - kind: crate
   url: https://static.crates.io/crates/winapi-x86_64-pc-windows-gnu/winapi-x86_64-pc-windows-gnu-0.4.0.crate
+  ref: 712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f
 # end generated
 depends:
 - sdk/gdk-pixbuf.bst
diff --git a/elements/sdk/mozjs60.bst b/elements/sdk/mozjs60.bst
index e7455e9..eddb235 100644
--- a/elements/sdk/mozjs60.bst
+++ b/elements/sdk/mozjs60.bst
@@ -2,6 +2,7 @@ kind: manual
 sources:
 - kind: tar
   url: gnome_download:teams/releng/tarballs-needing-help/mozjs/mozjs-60.1.0.tar.bz2
+  ref: 834ffe877fdbbd81315ae3c101221fa404096c354483a86c1a02ece19fca68fd
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/pycairo.bst b/elements/sdk/pycairo.bst
index 827abf1..a5080d3 100644
--- a/elements/sdk/pycairo.bst
+++ b/elements/sdk/pycairo.bst
@@ -2,6 +2,7 @@ kind: distutils
 sources:
 - kind: tar
   url: github_com:pygobject/pycairo/releases/download/v1.16.3/pycairo-1.16.3.tar.gz
+  ref: 5bb321e5d4f8b3a51f56fc6a35c143f1b72ce0d748b43d8b623596e8215f01f7
 depends:
 - filename: desktop/cairo.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/sdl2-image.bst b/elements/sdk/sdl2-image.bst
index 101cdd3..ecd5b0a 100644
--- a/elements/sdk/sdl2-image.bst
+++ b/elements/sdk/sdl2-image.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.libsdl.org/projects/SDL_image/release/SDL2_image-2.0.2.tar.gz
+  ref: 72df075aef91fc4585098ea7e0b072d416ec7599aa10473719fbe51e9b8f6ce8
 depends:
 - sdk/sdl2.bst
 - filename: base.bst
diff --git a/elements/sdk/sdl2-mixer.bst b/elements/sdk/sdl2-mixer.bst
index 228a1ff..187a458 100644
--- a/elements/sdk/sdl2-mixer.bst
+++ b/elements/sdk/sdl2-mixer.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.libsdl.org/projects/SDL_mixer/release/SDL2_mixer-2.0.1.tar.gz
+  ref: 5a24f62a610249d744cbd8d28ee399d8905db7222bf3bdbc8a8b4a76e597695f
 depends:
 - sdk/sdl2.bst
 - filename: base.bst
diff --git a/elements/sdk/sdl2-net.bst b/elements/sdk/sdl2-net.bst
index 489819a..1b31630 100644
--- a/elements/sdk/sdl2-net.bst
+++ b/elements/sdk/sdl2-net.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.libsdl.org/projects/SDL_net/release/SDL2_net-2.0.1.tar.gz
+  ref: 15ce8a7e5a23dafe8177c8df6e6c79b6749a03fff1e8196742d3571657609d21
 depends:
 - sdk/sdl2.bst
 - filename: base.bst
diff --git a/elements/sdk/sdl2-ttf.bst b/elements/sdk/sdl2-ttf.bst
index 47c36ea..66dd08a 100644
--- a/elements/sdk/sdl2-ttf.bst
+++ b/elements/sdk/sdl2-ttf.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.libsdl.org/projects/SDL_ttf/release/SDL2_ttf-2.0.14.tar.gz
+  ref: 34db5e20bcf64e7071fe9ae25acaa7d72bdc4f11ab3ce59acc768ab62fe39276
 depends:
 - sdk/sdl2.bst
 - filename: desktop/freetype.bst
diff --git a/elements/sdk/sdl2.bst b/elements/sdk/sdl2.bst
index a7666e8..4745d99 100644
--- a/elements/sdk/sdl2.bst
+++ b/elements/sdk/sdl2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.libsdl.org/release/SDL2-2.0.8.tar.gz
+  ref: edc77c57308661d576e843344d8638e025a7818bff73f8fbfab09c3c5fd092ec
 - kind: patch
   path: files/sdl2/sdl2-unity-fix.patch
 depends:
diff --git a/elements/sdk/vala-tarball.bst b/elements/sdk/vala-tarball.bst
index f6b28c2..8c72647 100644
--- a/elements/sdk/vala-tarball.bst
+++ b/elements/sdk/vala-tarball.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:vala/0.36/vala-0.36.14.tar.xz
+  ref: 31df542f37f78d8847c3675a76f691df9e8a6ccfd93045ca3a33cd25db3aa4d2
 depends:
 - filename: base.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/woff2.bst b/elements/sdk/woff2.bst
index 883435c..9cc0bab 100644
--- a/elements/sdk/woff2.bst
+++ b/elements/sdk/woff2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:google/woff2/archive/v1.0.2.tar.gz
+  ref: add272bb09e6384a4833ffca4896350fdb16e0ca22df68c0384773c67a175594
 depends:
 - sdk/brotli.bst
 - filename: base.bst
[Date Prev][Date Next] [Thread Prev][Thread Next] [Thread Index] [Date Index] [Author Index]