[gnome-build-meta/mclasen-3-34] 3.34

From: Matthias Clasen <matthiasc src gnome org>
To: commits-list gnome org
Cc:
Subject: [gnome-build-meta/mclasen-3-34] 3.34
Date: Tue, 18 Feb 2020 21:02:44 +0000 (UTC)
commit df096cd5ea8f950e1c9563f073b5d936c4aaa970
Author: Matthias Clasen <mclasen redhat com>
Date:   Tue Feb 18 15:35:50 2020 -0500

    3.34

 .gitlab-ci.yml                                        |  6 ++----
 elements/core-deps/ModemManager.bst                   |  2 +-
 elements/core-deps/NetworkManager.bst                 |  3 ++-
 elements/core-deps/PackageKit.bst                     |  1 +
 elements/core-deps/accountsservice.bst                |  1 +
 elements/core-deps/atkmm-1.6.bst                      |  1 +
 elements/core-deps/avahi.bst                          |  1 +
 elements/core-deps/babl.bst                           |  3 ++-
 elements/core-deps/berkeleydb.bst                     |  1 +
 elements/core-deps/blockdev.bst                       |  1 +
 elements/core-deps/boost.bst                          |  7 ++++---
 elements/core-deps/cairomm-1.0.bst                    |  1 +
 elements/core-deps/colord-gtk.bst                     |  1 +
 elements/core-deps/colord.bst                         |  1 +
 elements/core-deps/cryptsetup.bst                     |  1 +
 elements/core-deps/dmraid.bst                         |  1 +
 elements/core-deps/dotconf.bst                        |  1 +
 elements/core-deps/espeak.bst                         |  1 +
 elements/core-deps/evolution-data-server.bst          |  3 ++-
 elements/core-deps/exempi.bst                         |  1 +
 elements/core-deps/exiv2.bst                          |  1 +
 elements/core-deps/folks.bst                          |  3 ++-
 elements/core-deps/gegl.bst                           |  3 ++-
 elements/core-deps/geocode-glib.bst                   |  1 +
 elements/core-deps/gexiv2.bst                         |  1 +
 elements/core-deps/glibmm-2.4.bst                     |  1 +
 elements/core-deps/gmime3.bst                         |  3 ++-
 elements/core-deps/gnome-autoar.bst                   |  1 +
 elements/core-deps/gnome-common.bst                   |  1 +
 elements/core-deps/gnome-online-accounts.bst          |  1 +
 elements/core-deps/gnome-online-miners.bst            |  1 +
 elements/core-deps/gnome-video-effects.bst            |  1 +
 elements/core-deps/gom.bst                            |  3 ++-
 elements/core-deps/grilo-plugins.bst                  |  3 ++-
 elements/core-deps/grilo.bst                          |  3 ++-
 elements/core-deps/gsound.bst                         |  1 +
 elements/core-deps/gspell.bst                         |  3 ++-
 elements/core-deps/gssdp.bst                          |  1 +
 elements/core-deps/gtk-vnc.bst                        |  1 +
 elements/core-deps/gtkmm-3.bst                        |  1 +
 elements/core-deps/gtkmm.bst                          |  2 +-
 elements/core-deps/gtksourceview.bst                  |  1 +
 elements/core-deps/gupnp-av.bst                       |  1 +
 elements/core-deps/gupnp-dlna.bst                     |  1 +
 elements/core-deps/gupnp.bst                          |  1 +
 elements/core-deps/intltool.bst                       |  1 +
 elements/core-deps/iptables.bst                       |  1 +
 elements/core-deps/json-c.bst                         |  1 +
 elements/core-deps/libatasmart.bst                    |  1 +
 elements/core-deps/libbytesize.bst                    |  1 +
 elements/core-deps/libchamplain.bst                   |  1 +
 elements/core-deps/libcue.bst                         |  1 +
 elements/core-deps/libdaemon.bst                      |  1 +
 elements/core-deps/libdazzle.bst                      |  1 +
 elements/core-deps/libdvdread.bst                     |  1 +
 elements/core-deps/libevdev.bst                       |  1 +
 elements/core-deps/libgdata.bst                       |  1 +
 elements/core-deps/libgfbgraph.bst                    |  1 +
 elements/core-deps/libgnomekbd.bst                    |  1 +
 elements/core-deps/libgovirt.bst                      |  3 ++-
 elements/core-deps/libgsf.bst                         |  1 +
 elements/core-deps/libgtop.bst                        |  1 +
 elements/core-deps/libgudev.bst                       |  1 +
 elements/core-deps/libgusb.bst                        |  3 ++-
 elements/core-deps/libgweather.bst                    |  1 +
 elements/core-deps/libgxps.bst                        |  1 +
 elements/core-deps/libhandy.bst                       |  1 +
 elements/core-deps/libical.bst                        |  7 ++-----
 elements/core-deps/libinput.bst                       |  3 ++-
 elements/core-deps/libmbim.bst                        |  3 ++-
 elements/core-deps/libmediaart.bst                    |  1 +
 elements/core-deps/libmusicbrainz.bst                 |  1 +
 elements/core-deps/libndp.bst                         |  1 +
 elements/core-deps/libnl.bst                          |  1 +
 elements/core-deps/liboauth.bst                       |  1 +
 elements/core-deps/libosinfo.bst                      |  3 ++-
 elements/core-deps/libpeas.bst                        |  3 ++-
 elements/core-deps/libqmi.bst                         |  3 ++-
 elements/core-deps/librest.bst                        |  1 +
 elements/core-deps/libsass.bst                        |  1 +
 elements/core-deps/libsigcplusplus-2.0.bst            |  1 +
 elements/core-deps/libusb.bst                         |  1 +
 elements/core-deps/libvirt-glib.bst                   |  3 ++-
 elements/core-deps/libvirt.bst                        |  1 +
 elements/core-deps/libwacom.bst                       |  1 +
 elements/core-deps/libxklavier.bst                    |  1 +
 elements/core-deps/libyaml.bst                        |  1 +
 elements/core-deps/libzapojit.bst                     |  1 +
 elements/core-deps/lvm2.bst                           |  1 +
 elements/core-deps/mm-common.bst                      |  1 +
 elements/core-deps/mobile-broadband-provider-info.bst |  1 +
 elements/core-deps/mpc.bst                            |  1 +
 elements/core-deps/mpfr.bst                           |  1 +
 elements/core-deps/mtdev.bst                          |  1 +
 elements/core-deps/ndctl.bst                          |  1 +
 elements/core-deps/neon.bst                           |  1 +
 elements/core-deps/openldap.bst                       |  1 +
 elements/core-deps/osinfo-db-tools.bst                |  3 ++-
 elements/core-deps/pangomm-1.4.bst                    |  1 +
 elements/core-deps/parted.bst                         |  1 +
 elements/core-deps/phodav.bst                         |  1 +
 elements/core-deps/polkit.bst                         |  1 +
 elements/core-deps/poppler.bst                        |  1 +
 elements/core-deps/portablexdr.bst                    |  1 +
 elements/core-deps/portaudio.bst                      |  1 +
 elements/core-deps/ppp.bst                            |  4 +++-
 elements/core-deps/pyatspi2.bst                       |  3 ++-
 elements/core-deps/rpcsvc-proto.bst                   |  1 +
 elements/core-deps/samba.bst                          | 11 ++++++-----
 elements/core-deps/sane-backends.bst                  |  1 +
 elements/core-deps/sassc.bst                          |  1 +
 elements/core-deps/speech-dispatcher.bst              |  1 +
 elements/core-deps/spice-gtk.bst                      |  1 +
 elements/core-deps/spice-protocol.bst                 |  1 +
 elements/core-deps/startup-notification.bst           |  1 +
 elements/core-deps/totem-pl-parser.bst                |  1 +
 elements/core-deps/tracker-miners.bst                 |  1 +
 elements/core-deps/tracker.bst                        |  1 +
 elements/core-deps/udisks2.bst                        |  1 +
 elements/core-deps/uhttpmock.bst                      |  1 +
 elements/core-deps/upower.bst                         |  1 +
 elements/core-deps/volume-key.bst                     |  1 +
 elements/core-deps/xmlb.bst                           |  1 +
 elements/core-deps/xmlto.bst                          |  1 +
 elements/core/baobab.bst                              |  1 +
 elements/core/cheese.bst                              |  1 +
 elements/core/eog.bst                                 |  1 +
 elements/core/epiphany.bst                            |  3 ++-
 elements/core/evince.bst                              |  1 +
 elements/core/file-roller.bst                         |  3 ++-
 elements/core/gdm.bst                                 |  1 +
 elements/core/gedit.bst                               |  1 +
 elements/core/gnome-backgrounds.bst                   |  1 +
 elements/core/gnome-bluetooth.bst                     |  1 +
 elements/core/gnome-boxes.bst                         |  1 +
 elements/core/gnome-calculator.bst                    |  1 +
 elements/core/gnome-calendar.bst                      |  1 +
 elements/core/gnome-characters.bst                    |  1 +
 elements/core/gnome-clocks.bst                        |  1 +
 elements/core/gnome-color-manager.bst                 |  1 +
 elements/core/gnome-contacts.bst                      |  1 +
 elements/core/gnome-control-center.bst                |  3 ++-
 elements/core/gnome-desktop.bst                       |  3 ++-
 elements/core/gnome-disk-utility.bst                  |  3 ++-
 elements/core/gnome-font-viewer.bst                   |  1 +
 elements/core/gnome-getting-started-docs.bst          |  1 +
 elements/core/gnome-initial-setup.bst                 |  1 +
 elements/core/gnome-keyring.bst                       |  1 +
 elements/core/gnome-logs.bst                          |  1 +
 elements/core/gnome-maps.bst                          |  1 +
 elements/core/gnome-menus.bst                         |  1 +
 elements/core/gnome-music.bst                         |  3 ++-
 elements/core/gnome-photos.bst                        |  3 ++-
 elements/core/gnome-screenshot.bst                    |  1 +
 elements/core/gnome-session.bst                       |  1 +
 elements/core/gnome-settings-daemon.bst               |  1 +
 elements/core/gnome-shell-extensions.bst              |  1 +
 elements/core/gnome-shell.bst                         |  3 ++-
 elements/core/gnome-software.bst                      |  1 +
 elements/core/gnome-system-monitor.bst                |  1 +
 elements/core/gnome-terminal.bst                      |  1 +
 elements/core/gnome-themes-extra.bst                  |  1 +
 elements/core/gnome-user-docs.bst                     |  1 +
 elements/core/gnome-weather.bst                       |  1 +
 elements/core/mutter.bst                              |  3 ++-
 elements/core/nautilus.bst                            |  1 +
 elements/core/network-manager-applet.bst              |  1 +
 elements/core/orca.bst                                |  3 ++-
 elements/core/rygel.bst                               |  1 +
 elements/core/simple-scan.bst                         |  3 ++-
 elements/core/sushi.bst                               |  1 +
 elements/core/totem.bst                               |  1 +
 elements/core/vino.bst                                |  1 +
 elements/freedesktop-sdk.bst                          |  1 +
 elements/sdk/WebKitGTK.bst                            | 10 ++++------
 elements/sdk/adwaita-icon-theme.bst                   |  1 +
 elements/sdk/appstream-glib.bst                       |  1 +
 elements/sdk/at-spi2-atk.bst                          |  1 +
 elements/sdk/at-spi2-core.bst                         |  1 +
 elements/sdk/atk.bst                                  |  1 +
 elements/sdk/brotli.bst                               |  1 +
 elements/sdk/cantarell-fonts.bst                      |  3 ++-
 elements/sdk/clutter-gst.bst                          |  1 +
 elements/sdk/clutter-gtk.bst                          |  1 +
 elements/sdk/clutter.bst                              |  1 +
 elements/sdk/cogl.bst                                 |  1 +
 elements/sdk/dconf.bst                                |  1 +
 elements/sdk/enchant-2.bst                            |  1 +
 elements/sdk/gcab.bst                                 |  1 +
 elements/sdk/gcr.bst                                  |  1 +
 elements/sdk/gdk-pixbuf.bst                           |  1 +
 elements/sdk/geoclue.bst                              |  1 +
 elements/sdk/gjs.bst                                  |  1 +
 elements/sdk/glib-networking.bst                      |  1 +
 elements/sdk/glib.bst                                 |  1 +
 elements/sdk/gobject-introspection.bst                |  1 +
 elements/sdk/gsettings-desktop-schemas.bst            |  1 +
 elements/sdk/gtk+-3.bst                               |  3 ++-
 elements/sdk/gtk-doc.bst                              |  1 +
 elements/sdk/gtk.bst                                  |  2 +-
 elements/sdk/gvfs.bst                                 |  1 +
 elements/sdk/ibus.bst                                 |  1 +
 elements/sdk/json-glib.bst                            |  1 +
 elements/sdk/krb5.bst                                 |  1 +
 elements/sdk/libcanberra.bst                          |  1 +
 elements/sdk/libcroco.bst                             |  1 +
 elements/sdk/libgee.bst                               |  3 ++-
 elements/sdk/libnotify.bst                            |  1 +
 elements/sdk/librsvg.bst                              |  1 +
 elements/sdk/libsecret.bst                            |  3 ++-
 elements/sdk/libsoup.bst                              |  1 +
 elements/sdk/libwpe.bst                               |  1 +
 elements/sdk/mozjs60.bst                              | 12 +++++++-----
 elements/sdk/openjpeg.bst                             |  1 +
 elements/sdk/pango.bst                                |  1 +
 elements/sdk/pycairo.bst                              |  1 +
 elements/sdk/pygobject.bst                            |  1 +
 elements/sdk/python-pygments.bst                      |  1 +
 elements/sdk/python2.bst                              |  5 +++--
 elements/sdk/vala-tarball.bst                         |  1 +
 elements/sdk/vala.bst                                 |  3 ++-
 elements/sdk/vte.bst                                  |  1 +
 elements/sdk/woff2.bst                                |  1 +
 elements/sdk/wpebackend-fdo.bst                       |  1 +
 elements/sdk/yelp-tools.bst                           |  1 +
 elements/sdk/yelp-xsl.bst                             |  1 +
 elements/sdk/yelp.bst                                 |  1 +
 elements/sdk/zenity.bst                               |  1 +
 project.conf                                          | 11 ++++-------
 229 files changed, 291 insertions(+), 77 deletions(-)
---
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 0f8b10c7..78c3195c 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -94,8 +94,7 @@ default:
   stage: build
   dependencies: [track]
   script:
-  - ${BST} --max-jobs $(( $(nproc) / 4 )) -o arch "${ARCH}" build core.bst flatpak-runtimes.bst
-    flatpak-platform-extensions.bst platform-manifest.bst sdk-manifest.bst
+  - ${BST} --max-jobs $(( $(nproc) / 4 )) -o arch "${ARCH}" build core.bst flatpak-runtimes.bst 
flatpak-platform-extensions.bst platform-manifest.bst sdk-manifest.bst
   # Store all the downloaded git repos and tarballs in the cache.
   # This saves us fetching them on every build
   cache: &bst-cache
@@ -222,8 +221,7 @@ flatpak-prepare:
   stage: prepare_flatpak
   dependencies: []
   script:
-  - flat-manager/flat-manager-client create $FLAT_MANAGER_SERVER $FLAT_MANAGER_REPO
-    > build.txt
+  - flat-manager/flat-manager-client create $FLAT_MANAGER_SERVER $FLAT_MANAGER_REPO > build.txt
   artifacts:
     paths:
     - build.txt
diff --git a/elements/core-deps/ModemManager.bst b/elements/core-deps/ModemManager.bst
index bd7fcb77..5529efd0 100644
--- a/elements/core-deps/ModemManager.bst
+++ b/elements/core-deps/ModemManager.bst
@@ -1,8 +1,8 @@
 kind: autotools
 sources:
-# https://gitlab.freedesktop.org/mobile-broadband/ModemManager/issues/85
 - kind: tar
   url: https://www.freedesktop.org/software/ModemManager/ModemManager-1.10.8.tar.xz
+  ref: cbe174078dbdf3f746a55f0004353d3c27da2a31da553036d90fc7dc34a0169a
 depends:
 - core-deps/libgudev.bst
 - core-deps/libmbim.bst
diff --git a/elements/core-deps/NetworkManager.bst b/elements/core-deps/NetworkManager.bst
index cfd4f114..801f3908 100644
--- a/elements/core-deps/NetworkManager.bst
+++ b/elements/core-deps/NetworkManager.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: gnome_downloads:NetworkManager/1.20/NetworkManager-1.20.8.tar.xz
+  url: gnome_downloads:NetworkManager/1.20/NetworkManager-1.20.10.tar.xz
+  ref: d1de21754ad125671e9c50b5a67f9e47f7c9409937bac08ae9a8005a445945c5
 depends:
 - filename: core-deps/intltool.bst
   type: build
diff --git a/elements/core-deps/PackageKit.bst b/elements/core-deps/PackageKit.bst
index 2dabb8a5..f72a0910 100644
--- a/elements/core-deps/PackageKit.bst
+++ b/elements/core-deps/PackageKit.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/PackageKit/releases/PackageKit-1.1.13.tar.xz
+  ref: 88b64130cca54a4e7a223d2ccf1b80cf5a19375fdd8bbb54498d16c3a2a221b7
 depends:
 - core-deps/NetworkManager.bst
 - filename: core-deps/intltool.bst
diff --git a/elements/core-deps/accountsservice.bst b/elements/core-deps/accountsservice.bst
index 8047b116..98ab0a02 100644
--- a/elements/core-deps/accountsservice.bst
+++ b/elements/core-deps/accountsservice.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/accountsservice/accountsservice-0.6.55.tar.xz
+  ref: ff2b2419a7e06bd9cb335ffe391c7409b49a0f0130b890bd54692a3986699c9b
 depends:
 - core-deps/polkit.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/atkmm-1.6.bst b/elements/core-deps/atkmm-1.6.bst
index 79e260ed..51aa7300 100644
--- a/elements/core-deps/atkmm-1.6.bst
+++ b/elements/core-deps/atkmm-1.6.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:atkmm/2.28/atkmm-2.28.0.tar.xz
+  ref: 4c4cfc917fd42d3879ce997b463428d6982affa0fb660cafcc0bc2d9afcedd3a
 depends:
 - core-deps/glibmm-2.4.bst
 - sdk/atk.bst
diff --git a/elements/core-deps/avahi.bst b/elements/core-deps/avahi.bst
index d7f744bf..a4663929 100644
--- a/elements/core-deps/avahi.bst
+++ b/elements/core-deps/avahi.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:lathiat/avahi/releases/download/v0.7/avahi-0.7.tar.gz
+  ref: 57a99b5dfe7fdae794e3d1ee7a62973a368e91e414bd0dfa5d84434de5b14804
 depends:
 - filename: core-deps/intltool.bst
   type: build
diff --git a/elements/core-deps/babl.bst b/elements/core-deps/babl.bst
index 052e2e70..a8041078 100644
--- a/elements/core-deps/babl.bst
+++ b/elements/core-deps/babl.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: https://ftp.gimp.org/pub/babl/0.1/babl-0.1.72.tar.xz
+  url: https://ftp.gimp.org/pub/babl/0.1/babl-0.1.74.tar.xz
+  ref: 9a710b6950da37ada94cd9e2046cbce26de12473da32a7b79b7d1432fc66ce0e
 depends:
 - filename: sdk/gobject-introspection.bst
   type: build
diff --git a/elements/core-deps/berkeleydb.bst b/elements/core-deps/berkeleydb.bst
index 88ac502d..4073c4d8 100644
--- a/elements/core-deps/berkeleydb.bst
+++ b/elements/core-deps/berkeleydb.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://http.debian.net/debian/pool/main/d/db5.3/db5.3_5.3.28.orig.tar.xz
+  ref: e1f85c8b6ebd0ed3ca72fa0ae97b65006f6d0bd0cd6f4ac24bed103cb5497bf5
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/blockdev.bst b/elements/core-deps/blockdev.bst
index f5fe107d..7860a88b 100644
--- a/elements/core-deps/blockdev.bst
+++ b/elements/core-deps/blockdev.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:storaged-project/libblockdev/releases/download/2.21-1/libblockdev-2.21.tar.gz
+  ref: 317225f0d6cbc99d90481b0f8a30be8c325f5b5aebe82f9adf409214081de10a
 depends:
 - core-deps/cryptsetup.bst
 - core-deps/dmraid.bst
diff --git a/elements/core-deps/boost.bst b/elements/core-deps/boost.bst
index c19bfddd..546ade4c 100644
--- a/elements/core-deps/boost.bst
+++ b/elements/core-deps/boost.bst
@@ -2,16 +2,17 @@ kind: manual
 sources:
 - kind: tar
   url: https://dl.bintray.com/boostorg/release/1.66.0/source/boost_1_66_0.tar.bz2
+  ref: 5721818253e6a0989583192f96782c4a98eb6204965316df9f5ad75819225ca9
 depends:
 - filename: bootstrap-import.bst
   junction: freedesktop-sdk.bst
 config:
   configure-commands:
-    - ./bootstrap.sh --includedir=%{install-root}%{includedir} --libdir=%{install-root}%{libdir}
+  - ./bootstrap.sh --includedir=%{install-root}%{includedir} --libdir=%{install-root}%{libdir}
   build-commands:
-    - ./b2 -q -j${JOBS} --build-dir=_build link=shared stage
+  - ./b2 -q -j${JOBS} --build-dir=_build link=shared stage
   install-commands:
-    - ./b2 -q --build-dir=_build link=shared install
+  - ./b2 -q --build-dir=_build link=shared install
 environment:
   JOBS: '%{max-jobs}'
 environment-nocache:
diff --git a/elements/core-deps/cairomm-1.0.bst b/elements/core-deps/cairomm-1.0.bst
index d8fb8c1c..ff0e78dd 100644
--- a/elements/core-deps/cairomm-1.0.bst
+++ b/elements/core-deps/cairomm-1.0.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: cairo_org:releases/cairomm-1.13.1.tar.gz
+  ref: 97a78bd7de6baf8af3da1f9b39f1317f8da9f1145b7694e928fbd5521da08ef6
 depends:
 - core-deps/libsigcplusplus-2.0.bst
 - filename: components/cairo.bst
diff --git a/elements/core-deps/colord-gtk.bst b/elements/core-deps/colord-gtk.bst
index e18f7d0e..0b52559e 100644
--- a/elements/core-deps/colord-gtk.bst
+++ b/elements/core-deps/colord-gtk.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/colord/releases/colord-gtk-0.2.0.tar.xz
+  ref: 2a4cfae08bc69f000f40374934cd26f4ae86d286ce7de89f1622abc59644c717
 depends:
 - core-deps/colord.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/colord.bst b/elements/core-deps/colord.bst
index 588b8a84..b36ab8e2 100644
--- a/elements/core-deps/colord.bst
+++ b/elements/core-deps/colord.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/colord/releases/colord-1.4.4.tar.xz
+  ref: 9a0fe80160bf88efddb582a9fc0169f56065276dc3882c47dddb9eecd048c0a5
 depends:
 - core-deps/libgudev.bst
 - core-deps/libgusb.bst
diff --git a/elements/core-deps/cryptsetup.bst b/elements/core-deps/cryptsetup.bst
index 3934e478..eca6d0c7 100644
--- a/elements/core-deps/cryptsetup.bst
+++ b/elements/core-deps/cryptsetup.bst
@@ -3,6 +3,7 @@ sources:
 - kind: tar
   # volume_key doesn't work with 2.x
   url: https://www.kernel.org/pub/linux/utils/cryptsetup/v1.7/cryptsetup-1.7.5.tar.xz
+  ref: 2b30cd1d0dd606a53ac77b406e1d37798d4b0762fa89de6ea546201906a251bd
 depends:
 - core-deps/json-c.bst
 - core-deps/lvm2.bst
diff --git a/elements/core-deps/dmraid.bst b/elements/core-deps/dmraid.bst
index ce55d3e7..a9ff173a 100644
--- a/elements/core-deps/dmraid.bst
+++ b/elements/core-deps/dmraid.bst
@@ -3,6 +3,7 @@ sources:
 - kind: tar
   url: tarballs_needing_help:dmraid-1.0.0.rc16-3.tar.bz2
   base-dir: dmraid/1.0.0.rc16-3/dmraid
+  ref: 93421bd169d71ff5e7d2db95b62b030bfa205a12010b6468dcdef80337d6fbd8
 depends:
 - core-deps/lvm2.bst
 - filename: public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/dotconf.bst b/elements/core-deps/dotconf.bst
index fe0d44b0..b1ee6031 100644
--- a/elements/core-deps/dotconf.bst
+++ b/elements/core-deps/dotconf.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:williamh/dotconf/archive/v1.3.tar.gz
+  ref: 7f1ecf40de1ad002a065a321582ed34f8c14242309c3547ad59710ae3c805653
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/espeak.bst b/elements/core-deps/espeak.bst
index f54bad70..fe2d90cc 100644
--- a/elements/core-deps/espeak.bst
+++ b/elements/core-deps/espeak.bst
@@ -2,6 +2,7 @@ kind: manual
 sources:
 - kind: zip
   url: downloads.sourceforge.net:espeak/espeak/espeak-1.48/espeak-1.48.04-source.zip
+  ref: bf9a17673adffcc28ff7ea18764f06136547e97bbd9edf2ec612f09b207f0659
 depends:
 - core-deps/portaudio.bst
 - filename: bootstrap-import.bst
diff --git a/elements/core-deps/evolution-data-server.bst b/elements/core-deps/evolution-data-server.bst
index 51257b6c..7af23464 100644
--- a/elements/core-deps/evolution-data-server.bst
+++ b/elements/core-deps/evolution-data-server.bst
@@ -1,7 +1,8 @@
 kind: cmake
 sources:
 - kind: tar
-  url: gnome_downloads:evolution-data-server/3.34/evolution-data-server-3.34.3.tar.xz
+  url: gnome_downloads:evolution-data-server/3.34/evolution-data-server-3.34.4.tar.xz
+  ref: 985c4b4b613c50c999a4ca5e9d52478acbea85e1e99bab3a8b6e57ba7eace8f3
 depends:
 - core-deps/gnome-online-accounts.bst
 - filename: core-deps/intltool.bst
diff --git a/elements/core-deps/exempi.bst b/elements/core-deps/exempi.bst
index dac84468..5e6f9719 100644
--- a/elements/core-deps/exempi.bst
+++ b/elements/core-deps/exempi.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://libopenraw.freedesktop.org/download/exempi-2.4.5.tar.bz2
+  ref: 406185feb88e84ea1d4b4251370be2991205790d7113a7e28e192ff46a4f221e
 depends:
 - core-deps/boost.bst
 - filename: components/expat.bst
diff --git a/elements/core-deps/exiv2.bst b/elements/core-deps/exiv2.bst
index 2b27f01c..8fdc8ee3 100644
--- a/elements/core-deps/exiv2.bst
+++ b/elements/core-deps/exiv2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:Exiv2/exiv2/archive/v0.26.tar.gz
+  ref: 51cffa8d19d67e1da6c1d0f570a75b8f6c814113367318c2c0407691888c5f01
 depends:
 - filename: public-stacks/buildsystem-cmake.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/folks.bst b/elements/core-deps/folks.bst
index 73387242..28c3852b 100644
--- a/elements/core-deps/folks.bst
+++ b/elements/core-deps/folks.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:folks/0.13/folks-0.13.1.tar.xz
+  url: gnome_downloads:folks/0.13/folks-0.13.2.tar.xz
+  ref: 0263d6b8de41acabbc95e9a2418374271fb649412a1de3e3ef6ad4a3a5270173
 depends:
 - core-deps/evolution-data-server.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gegl.bst b/elements/core-deps/gegl.bst
index 9c9c3f13..e95eb4f1 100644
--- a/elements/core-deps/gegl.bst
+++ b/elements/core-deps/gegl.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: https://ftp.gimp.org/pub/gegl/0.4/gegl-0.4.16.tar.bz2
+  url: https://ftp.gimp.org/pub/gegl/0.4/gegl-0.4.20.tar.xz
+  ref: 23bd8bb42b20de7c2a8c314eeb5301dc20141feda20a4b1ed455020b69b73dff
 depends:
 - core-deps/babl.bst
 - sdk/gdk-pixbuf.bst
diff --git a/elements/core-deps/geocode-glib.bst b/elements/core-deps/geocode-glib.bst
index aa940d26..b9cf0240 100644
--- a/elements/core-deps/geocode-glib.bst
+++ b/elements/core-deps/geocode-glib.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:geocode-glib/3.26/geocode-glib-3.26.1.tar.xz
+  ref: 5baa6ab76a76c9fc567e4c32c3af2cd1d1784934c255bc5a62c512e6af6bde1c
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gexiv2.bst b/elements/core-deps/gexiv2.bst
index 3b5a31e7..23637d25 100644
--- a/elements/core-deps/gexiv2.bst
+++ b/elements/core-deps/gexiv2.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gexiv2/0.12/gexiv2-0.12.0.tar.xz
+  ref: 58f539b0386f36300b76f3afea3a508de4914b27e78f58ee4d142486a42f926a
 depends:
 - sdk/glib.bst
 - core-deps/exiv2.bst
diff --git a/elements/core-deps/glibmm-2.4.bst b/elements/core-deps/glibmm-2.4.bst
index 9a210c5f..58bf021d 100644
--- a/elements/core-deps/glibmm-2.4.bst
+++ b/elements/core-deps/glibmm-2.4.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:glibmm/2.62/glibmm-2.62.0.tar.xz
+  ref: 36659f13cc73282392d1305858f3bbca46fbd1ce2f078cc9db8b9f79b2e93cfe
 depends:
 - core-deps/libsigcplusplus-2.0.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/gmime3.bst b/elements/core-deps/gmime3.bst
index 96e3d496..51436400 100644
--- a/elements/core-deps/gmime3.bst
+++ b/elements/core-deps/gmime3.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: gnome_downloads:gmime/3.2/gmime-3.2.5.tar.xz
+  url: gnome_downloads:gmime/3.2/gmime-3.2.6.tar.xz
+  ref: abff194c7c4802fba2e233890d09dde8bf7170c3ad5e13000601c8d5b3c44717
 depends:
 - sdk/glib.bst
 - filename: sdk/gtk-doc.bst
diff --git a/elements/core-deps/gnome-autoar.bst b/elements/core-deps/gnome-autoar.bst
index e880631c..a02e11be 100644
--- a/elements/core-deps/gnome-autoar.bst
+++ b/elements/core-deps/gnome-autoar.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gnome-autoar/0.2/gnome-autoar-0.2.4.tar.xz
+  ref: 0a34c377f8841abbf4c29bc848b301fbd8e4e20c03d7318c777c58432033657a
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gnome-common.bst b/elements/core-deps/gnome-common.bst
index a850e5d6..1475575d 100644
--- a/elements/core-deps/gnome-common.bst
+++ b/elements/core-deps/gnome-common.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gnome-common/3.18/gnome-common-3.18.0.tar.xz
+  ref: 22569e370ae755e04527b76328befc4c73b62bfd4a572499fde116b8318af8cf
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/gnome-online-accounts.bst b/elements/core-deps/gnome-online-accounts.bst
index 7d2f1524..882cc9e7 100644
--- a/elements/core-deps/gnome-online-accounts.bst
+++ b/elements/core-deps/gnome-online-accounts.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gnome-online-accounts/3.34/gnome-online-accounts-3.34.1.tar.xz
+  ref: 4832ca8e48d3a497fc676e7b6f146009ab4206995362977b9805aa39f164783a
 depends:
 - core-deps/librest.bst
 - sdk/WebKitGTK.bst
diff --git a/elements/core-deps/gnome-online-miners.bst b/elements/core-deps/gnome-online-miners.bst
index 460efb59..56114e83 100644
--- a/elements/core-deps/gnome-online-miners.bst
+++ b/elements/core-deps/gnome-online-miners.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gnome-online-miners/3.34/gnome-online-miners-3.34.0.tar.xz
+  ref: 845c2260fb12f14315c800d04d60f37e076c7c7b4222587ae75f108562fa52d8
 depends:
 - core-deps/gnome-online-accounts.bst
 - core-deps/grilo.bst
diff --git a/elements/core-deps/gnome-video-effects.bst b/elements/core-deps/gnome-video-effects.bst
index efcb808b..1a752fa6 100644
--- a/elements/core-deps/gnome-video-effects.bst
+++ b/elements/core-deps/gnome-video-effects.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-video-effects/0.5/gnome-video-effects-0.5.0.tar.xz
+  ref: 4dc68e9b38fdfc1e8e0414e2d7ee83ace78efdee76f30506cc9dcd07394ad0c8
 depends:
 - filename: components/gstreamer.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/gom.bst b/elements/core-deps/gom.bst
index 454ce05e..5dee2fe7 100644
--- a/elements/core-deps/gom.bst
+++ b/elements/core-deps/gom.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:gom/0.3/gom-0.3.3.tar.xz
+  url: gnome_downloads:gom/0.4/gom-0.4.tar.xz
+  ref: 68d08006aaa3b58169ce7cf1839498f45686fba8115f09acecb89d77e1018a9d
 depends:
 - sdk/gdk-pixbuf.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/grilo-plugins.bst b/elements/core-deps/grilo-plugins.bst
index 9ec35904..3b7d73db 100644
--- a/elements/core-deps/grilo-plugins.bst
+++ b/elements/core-deps/grilo-plugins.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:grilo-plugins/0.3/grilo-plugins-0.3.10.tar.xz
+  url: gnome_downloads:grilo-plugins/0.3/grilo-plugins-0.3.11.tar.xz
+  ref: dde2e605b1994341c6bf012493e056b406b08571834dea3b3c671d5b8b1dcd73
 depends:
 - core-deps/gmime3.bst
 - core-deps/gnome-online-accounts.bst
diff --git a/elements/core-deps/grilo.bst b/elements/core-deps/grilo.bst
index 767d1c1c..2dd74466 100644
--- a/elements/core-deps/grilo.bst
+++ b/elements/core-deps/grilo.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:grilo/0.3/grilo-0.3.11.tar.xz
+  url: gnome_downloads:grilo/0.3/grilo-0.3.12.tar.xz
+  ref: dbfbd6082103288592af97568180b9cc81a336a274ed5160412f87675ec11a71
 depends:
 - core-deps/totem-pl-parser.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/gsound.bst b/elements/core-deps/gsound.bst
index e5d9455f..5b1c5f24 100644
--- a/elements/core-deps/gsound.bst
+++ b/elements/core-deps/gsound.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gsound/1.0/gsound-1.0.2.tar.xz
+  ref: bba8ff30eea815037e53bee727bbd5f0b6a2e74d452a7711b819a7c444e78e53
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gspell.bst b/elements/core-deps/gspell.bst
index 584a1635..fdae1fd3 100644
--- a/elements/core-deps/gspell.bst
+++ b/elements/core-deps/gspell.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: gnome_downloads:gspell/1.8/gspell-1.8.2.tar.xz
+  url: gnome_downloads:gspell/1.8/gspell-1.8.3.tar.xz
+  ref: 5ae514dd0216be069176accf6d0049d6a01cfa6a50df4bc06be85f7080b62de8
 depends:
 - sdk/enchant-2.bst
 - sdk/gtk+-3.bst
diff --git a/elements/core-deps/gssdp.bst b/elements/core-deps/gssdp.bst
index 7d7160e3..9831c57d 100644
--- a/elements/core-deps/gssdp.bst
+++ b/elements/core-deps/gssdp.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gssdp/1.2/gssdp-1.2.2.tar.xz
+  ref: cabb9e3b456b8354a55e23eb0207545d974643cda6d623523470ebbc4188b0a4
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/gtk-vnc.bst b/elements/core-deps/gtk-vnc.bst
index e8e5c094..341c909a 100644
--- a/elements/core-deps/gtk-vnc.bst
+++ b/elements/core-deps/gtk-vnc.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gtk-vnc/1.0/gtk-vnc-1.0.0.tar.xz
+  ref: a81a1f1a79ad4618027628ffac27d3391524c063d9411c7a36a5ec3380e6c080
 depends:
 - sdk/gdk-pixbuf.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/gtkmm-3.bst b/elements/core-deps/gtkmm-3.bst
index 4935f5f4..bf6dd0b6 100644
--- a/elements/core-deps/gtkmm-3.bst
+++ b/elements/core-deps/gtkmm-3.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gtkmm/3.24/gtkmm-3.24.2.tar.xz
+  ref: 6d71091bcd1863133460d4188d04102810e9123de19706fb656b7bb915b4adc3
 depends:
 - core-deps/atkmm-1.6.bst
 - core-deps/cairomm-1.0.bst
diff --git a/elements/core-deps/gtkmm.bst b/elements/core-deps/gtkmm.bst
index 86d0f97e..82227836 100644
--- a/elements/core-deps/gtkmm.bst
+++ b/elements/core-deps/gtkmm.bst
@@ -1,7 +1,7 @@
 kind: autotools
 sources:
 - kind: tar
-  url: gnome_downloads:gtkmm/3.95/gtkmm-3.95.1.tar.xz
+  url: gnome_downloads:gtkmm/3.97/gtkmm-3.97.1.tar.xz
 depends:
 - core-deps/atkmm.bst
 - core-deps/cairomm.bst
diff --git a/elements/core-deps/gtksourceview.bst b/elements/core-deps/gtksourceview.bst
index c0294205..fbffaae1 100644
--- a/elements/core-deps/gtksourceview.bst
+++ b/elements/core-deps/gtksourceview.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gtksourceview/4.4/gtksourceview-4.4.0.tar.xz
+  ref: 9ddb914aef70a29a66acd93b4f762d5681202e44094d2d6370e51c9e389e689a
 depends:
 - sdk/gtk+-3.bst
 - filename: sdk/gtk-doc.bst
diff --git a/elements/core-deps/gupnp-av.bst b/elements/core-deps/gupnp-av.bst
index 87fbdbe1..dd1255bf 100644
--- a/elements/core-deps/gupnp-av.bst
+++ b/elements/core-deps/gupnp-av.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gupnp-av/0.12/gupnp-av-0.12.11.tar.xz
+  ref: 689dcf1492ab8991daea291365a32548a77d1a2294d85b33622b55cca9ce6fdc
 depends:
 - core-deps/gupnp.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/gupnp-dlna.bst b/elements/core-deps/gupnp-dlna.bst
index dca80449..e2267827 100644
--- a/elements/core-deps/gupnp-dlna.bst
+++ b/elements/core-deps/gupnp-dlna.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gupnp-dlna/0.10/gupnp-dlna-0.10.5.tar.xz
+  ref: 123e368227c11d5c17fc1aa76cbdaffa345355eb51d172cd39fc74a5b468ff6a
 depends:
 - sdk/glib.bst
 - sdk/gst-plugins-base.bst
diff --git a/elements/core-deps/gupnp.bst b/elements/core-deps/gupnp.bst
index c40a9f67..a6023e4a 100644
--- a/elements/core-deps/gupnp.bst
+++ b/elements/core-deps/gupnp.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gupnp/1.2/gupnp-1.2.2.tar.xz
+  ref: 9a80bd953e5c8772ad26b72f8da01cbe7241a113edd6084903f413ce751c9989
 depends:
 - core-deps/NetworkManager.bst
 - core-deps/gssdp.bst
diff --git a/elements/core-deps/intltool.bst b/elements/core-deps/intltool.bst
index d32a16d1..e049168e 100644
--- a/elements/core-deps/intltool.bst
+++ b/elements/core-deps/intltool.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://launchpad.net/intltool/trunk/0.51.0/+download/intltool-0.51.0.tar.gz
+  ref: 67c74d94196b153b774ab9f89b2fa6c6ba79352407037c8c14d5aeb334e959cd
 - kind: patch
   path: files/intltool/intltool-perl-5.22-compatibility.patch
 depends:
diff --git a/elements/core-deps/iptables.bst b/elements/core-deps/iptables.bst
index bdc3c3f0..bba82858 100644
--- a/elements/core-deps/iptables.bst
+++ b/elements/core-deps/iptables.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tarballs_needing_help:iptables_1.6.2.orig.tar.bz2
+  ref: 55d02dfa46263343a401f297d44190f2a3e5113c8933946f094ed40237053733
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/json-c.bst b/elements/core-deps/json-c.bst
index 4c1d6bbc..0f644fb5 100644
--- a/elements/core-deps/json-c.bst
+++ b/elements/core-deps/json-c.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://s3.amazonaws.com/json-c_releases/releases/json-c-0.13.1.tar.gz
+  ref: b87e608d4d3f7bfdd36ef78d56d53c74e66ab278d318b71e6002a369d36f4873
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libatasmart.bst b/elements/core-deps/libatasmart.bst
index 6ef07154..be1ea98e 100644
--- a/elements/core-deps/libatasmart.bst
+++ b/elements/core-deps/libatasmart.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tarballs_needing_help:libatasmart-0.19.tar.xz
+  ref: 61f0ea345f63d28ab2ff0dc352c22271661b66bf09642db3a4049ac9dbdb0f8d
 depends:
 - filename: components/systemd.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libbytesize.bst b/elements/core-deps/libbytesize.bst
index 35a88698..d8f6151d 100644
--- a/elements/core-deps/libbytesize.bst
+++ b/elements/core-deps/libbytesize.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:storaged-project/libbytesize/releases/download/1.2/libbytesize-1.2.tar.gz
+  ref: 65656ed62080d73d0f21d9647cee20533377bee150e91807fd54c502f3e1108f
 depends:
 - core-deps/mpfr.bst
 - filename: components/python3.bst
diff --git a/elements/core-deps/libchamplain.bst b/elements/core-deps/libchamplain.bst
index 8786358a..2ddd2452 100644
--- a/elements/core-deps/libchamplain.bst
+++ b/elements/core-deps/libchamplain.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:libchamplain/0.12/libchamplain-0.12.20.tar.xz
+  ref: 0232b4bfcd130a1c5bda7b6aec266bf2d06e701e8093df1886f1e26bc1ba3066
 depends:
 - sdk/clutter-gtk.bst
 - sdk/clutter.bst
diff --git a/elements/core-deps/libcue.bst b/elements/core-deps/libcue.bst
index 8a44061d..b5a6db69 100644
--- a/elements/core-deps/libcue.bst
+++ b/elements/core-deps/libcue.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: https://github.com/lipnitsk/libcue/archive/v2.2.1.tar.gz
+  ref: f27bc3ebb2e892cd9d32a7bee6d84576a60f955f29f748b9b487b173712f1200
 depends:
 - filename: components/bison.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libdaemon.bst b/elements/core-deps/libdaemon.bst
index f63830a3..ae37d159 100644
--- a/elements/core-deps/libdaemon.bst
+++ b/elements/core-deps/libdaemon.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tarballs_needing_help:libdaemon-0.14.tar.gz
+  ref: fd23eb5f6f986dcc7e708307355ba3289abe03cc381fc47a80bca4a50aa6b834
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libdazzle.bst b/elements/core-deps/libdazzle.bst
index 9db8076a..58b0dd9b 100644
--- a/elements/core-deps/libdazzle.bst
+++ b/elements/core-deps/libdazzle.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:libdazzle/3.34/libdazzle-3.34.1.tar.xz
+  ref: 3d981cbb9d9bb87bfaff7bfd44d9847223b3ef81e69225e4d1f6ac725a669505
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libdvdread.bst b/elements/core-deps/libdvdread.bst
index 51289834..5652a5a0 100644
--- a/elements/core-deps/libdvdread.bst
+++ b/elements/core-deps/libdvdread.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://download.videolan.org/pub/videolan/libdvdread/6.0.0/libdvdread-6.0.0.tar.bz2
+  ref: b33b1953b4860545b75f6efc06e01d9849e2ea4f797652263b0b4af6dd10f935
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libevdev.bst b/elements/core-deps/libevdev.bst
index 04417614..b907ad79 100644
--- a/elements/core-deps/libevdev.bst
+++ b/elements/core-deps/libevdev.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/libevdev/libevdev-1.8.0.tar.xz
+  ref: 20d3cae4efd277f485abdf8f2a7c46588e539998b5a08c2c4d368218379d4211
 depends:
 - filename: components/python3.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libgdata.bst b/elements/core-deps/libgdata.bst
index d1c76a47..324084db 100644
--- a/elements/core-deps/libgdata.bst
+++ b/elements/core-deps/libgdata.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:libgdata/0.17/libgdata-0.17.11.tar.xz
+  ref: 6b9917122e4def6e6f78bcb660e49e146540832e296abcb5cde99829a04ea986
 depends:
 - core-deps/gnome-online-accounts.bst
 - core-deps/liboauth.bst
diff --git a/elements/core-deps/libgfbgraph.bst b/elements/core-deps/libgfbgraph.bst
index 8a81f964..99f1af9c 100644
--- a/elements/core-deps/libgfbgraph.bst
+++ b/elements/core-deps/libgfbgraph.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gfbgraph/0.2/gfbgraph-0.2.3.tar.xz
+  ref: da1179083cde2b649d7491c745250a00d292e390fd620b7dd2dd95a122dae0b6
 depends:
 - core-deps/gnome-online-accounts.bst
 - filename: core-deps/intltool.bst
diff --git a/elements/core-deps/libgnomekbd.bst b/elements/core-deps/libgnomekbd.bst
index 3781efd7..6e81075f 100644
--- a/elements/core-deps/libgnomekbd.bst
+++ b/elements/core-deps/libgnomekbd.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:libgnomekbd/3.26/libgnomekbd-3.26.1.tar.xz
+  ref: f7ca02631576e9b88aee1b1bae37ac1488b80ee7975f20a97f29e761a7172679
 depends:
 - core-deps/libxklavier.bst
 - sdk/gtk+-3.bst
diff --git a/elements/core-deps/libgovirt.bst b/elements/core-deps/libgovirt.bst
index 21c087ce..d48a392f 100644
--- a/elements/core-deps/libgovirt.bst
+++ b/elements/core-deps/libgovirt.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: gnome_downloads:libgovirt/0.3/libgovirt-0.3.6.tar.xz
+  url: gnome_downloads:libgovirt/0.3/libgovirt-0.3.7.tar.xz
+  ref: 1266f011683a964729f53e74638c728d68537c1c102c8f27a01d2530e8e0f157
 depends:
 - core-deps/librest.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libgsf.bst b/elements/core-deps/libgsf.bst
index 64bfbbcc..b358e1f1 100644
--- a/elements/core-deps/libgsf.bst
+++ b/elements/core-deps/libgsf.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:libgsf/1.14/libgsf-1.14.46.tar.xz
+  ref: ea36959b1421fc8e72caa222f30ec3234d0ed95990e2bf28943a85f33eadad2d
 depends:
 - sdk/gdk-pixbuf.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/libgtop.bst b/elements/core-deps/libgtop.bst
index fef50798..6ef01ce3 100644
--- a/elements/core-deps/libgtop.bst
+++ b/elements/core-deps/libgtop.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:libgtop/2.40/libgtop-2.40.0.tar.xz
+  ref: 78f3274c0c79c434c03655c1b35edf7b95ec0421430897fb1345a98a265ed2d4
 depends:
 - sdk/glib.bst
 - filename: sdk/gtk-doc.bst
diff --git a/elements/core-deps/libgudev.bst b/elements/core-deps/libgudev.bst
index f66da3fa..db379cb1 100644
--- a/elements/core-deps/libgudev.bst
+++ b/elements/core-deps/libgudev.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:libgudev/233/libgudev-233.tar.xz
+  ref: 587c4970eb23f4e2deee2cb1fb7838c94a78c578f41ce12cac0a3f4a80dabb03
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libgusb.bst b/elements/core-deps/libgusb.bst
index 2541a883..e08ffd94 100644
--- a/elements/core-deps/libgusb.bst
+++ b/elements/core-deps/libgusb.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: people_freedesktop_org:~hughsient/releases/libgusb-0.3.2.tar.xz
+  url: people_freedesktop_org:~hughsient/releases/libgusb-0.3.3.tar.xz
+  ref: f93942585b7dfe7628415e1d504d9f6cf2cc1c42f1df2c8f7aa104111068eb92
 depends:
 - core-deps/libusb.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/libgweather.bst b/elements/core-deps/libgweather.bst
index 3df3ee77..1665a53c 100644
--- a/elements/core-deps/libgweather.bst
+++ b/elements/core-deps/libgweather.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:libgweather/3.34/libgweather-3.34.0.tar.xz
+  ref: 02245395d639d9749fe2d19b7e66b64a152b9509ab0e5aad92514538b9c6f1b9
 depends:
 - core-deps/geocode-glib.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/libgxps.bst b/elements/core-deps/libgxps.bst
index 96e7e64c..f6818581 100644
--- a/elements/core-deps/libgxps.bst
+++ b/elements/core-deps/libgxps.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:libgxps/0.3/libgxps-0.3.1.tar.xz
+  ref: 1a939fc8fcea9471b7eca46b1ac90cff89a30d26f65c7c9a375a4bf91223fa94
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libhandy.bst b/elements/core-deps/libhandy.bst
index eae09573..fa7bdde6 100644
--- a/elements/core-deps/libhandy.bst
+++ b/elements/core-deps/libhandy.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://source.puri.sm/Librem5/libhandy/-/archive/v0.0.10/libhandy-v0.0.10.tar.bz2
+  ref: 366350c0c15f53b8de4032780de4c5a5c41dfe2001d7b3d39ec6399123c2cb73
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libical.bst b/elements/core-deps/libical.bst
index b4ca95ab..e8c12d4f 100644
--- a/elements/core-deps/libical.bst
+++ b/elements/core-deps/libical.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:libical/libical/releases/download/v3.0.5/libical-3.0.5.tar.gz
+  ref: 7ad550c8c49c9b9983658e3ab3e68b1eee2439ec17b169a6b1e6ecb5274e78e6
 depends:
 - sdk/glib.bst
 - filename: sdk/gobject-introspection.bst
@@ -19,8 +20,4 @@ depends:
 - filename: bootstrap-import.bst
   junction: freedesktop-sdk.bst
 variables:
-  cmake-local:
-    -DENABLE_GTK_DOC=OFF
-    -DGOBJECT_INTROSPECTION=ON
-    -DICAL_GLIB=ON
-    -DICAL_GLIB_VAPI=ON
+  cmake-local: -DENABLE_GTK_DOC=OFF -DGOBJECT_INTROSPECTION=ON -DICAL_GLIB=ON -DICAL_GLIB_VAPI=ON
diff --git a/elements/core-deps/libinput.bst b/elements/core-deps/libinput.bst
index 2b8339ed..4eefa4fd 100644
--- a/elements/core-deps/libinput.bst
+++ b/elements/core-deps/libinput.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: https://www.freedesktop.org/software/libinput/libinput-1.14.3.tar.xz
+  url: https://www.freedesktop.org/software/libinput/libinput-1.15.1.tar.xz
+  ref: 6b2f57495c6f173ecf49ee19d3e10087d9916a52711e1b5eb01e0d9635950c16
 depends:
 - core-deps/libevdev.bst
 - core-deps/libwacom.bst
diff --git a/elements/core-deps/libmbim.bst b/elements/core-deps/libmbim.bst
index 86d1125f..84197313 100644
--- a/elements/core-deps/libmbim.bst
+++ b/elements/core-deps/libmbim.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: https://www.freedesktop.org/software/libmbim/libmbim-1.20.4.tar.xz
+  url: https://www.freedesktop.org/software/libmbim/libmbim-1.22.0.tar.xz
+  ref: 5c0778eb1cd12c3604523134e55183f5147b0cae71150e875b583768f7aa1f38
 depends:
 - core-deps/libgudev.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/libmediaart.bst b/elements/core-deps/libmediaart.bst
index 096a1c62..71d96a02 100644
--- a/elements/core-deps/libmediaart.bst
+++ b/elements/core-deps/libmediaart.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:libmediaart/1.9/libmediaart-1.9.4.tar.xz
+  ref: a57be017257e4815389afe4f58fdacb6a50e74fd185452b23a652ee56b04813d
 depends:
 - sdk/gdk-pixbuf.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/libmusicbrainz.bst b/elements/core-deps/libmusicbrainz.bst
index 5ab4b116..38cd4748 100644
--- a/elements/core-deps/libmusicbrainz.bst
+++ b/elements/core-deps/libmusicbrainz.bst
@@ -3,6 +3,7 @@ sources:
 - kind: tar
   url: github_com:metabrainz/libmusicbrainz/releases/download/release-5.1.0/libmusicbrainz-5.1.0.tar.gz
 # this patch has been merged upstream and can be removed when this is updated
+  ref: 6749259e89bbb273f3f5ad7acdffb7c47a2cf8fcaeab4c4695484cef5f4c6b46
 - kind: patch
   path: files/libmusicbrainz/cmake-ninja.patch
 depends:
diff --git a/elements/core-deps/libndp.bst b/elements/core-deps/libndp.bst
index 5a8d1892..00b49d8f 100644
--- a/elements/core-deps/libndp.bst
+++ b/elements/core-deps/libndp.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://libndp.org/files/libndp-1.6.tar.gz
+  ref: 0c7dfa84e013bd5e569ef2c6292a6f72cfaf14f4ff77a77425e52edc33ffac0e
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libnl.bst b/elements/core-deps/libnl.bst
index 6b06ea2b..271bf26a 100644
--- a/elements/core-deps/libnl.bst
+++ b/elements/core-deps/libnl.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:thom311/libnl/releases/download/libnl3_4_0/libnl-3.4.0.tar.gz
+  ref: b7287637ae71c6db6f89e1422c995f0407ff2fe50cecd61a312b6a9b0921f5bf
 depends:
 - filename: components/bison.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/liboauth.bst b/elements/core-deps/liboauth.bst
index 50e53891..ff63c611 100644
--- a/elements/core-deps/liboauth.bst
+++ b/elements/core-deps/liboauth.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: downloads.sourceforge.net:liboauth/liboauth-1.0.3.tar.gz
+  ref: 0df60157b052f0e774ade8a8bac59d6e8d4b464058cc55f9208d72e41156811f
 depends:
 - filename: components/nss.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libosinfo.bst b/elements/core-deps/libosinfo.bst
index 220419fc..8fede4da 100644
--- a/elements/core-deps/libosinfo.bst
+++ b/elements/core-deps/libosinfo.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: https://releases.pagure.org/libosinfo/libosinfo-1.6.0.tar.gz
+  url: https://releases.pagure.org/libosinfo/libosinfo-1.7.1.tar.xz
+  ref: bb26106ad4a9f8523f81b332d2aedb717cdcb0500b3f68ba7c6ff945c4d627e9
 - kind: local
   path: files/libosinfo/pci.ids
 - kind: local
diff --git a/elements/core-deps/libpeas.bst b/elements/core-deps/libpeas.bst
index 6e00fd7f..15d4a78a 100644
--- a/elements/core-deps/libpeas.bst
+++ b/elements/core-deps/libpeas.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:libpeas/1.24/libpeas-1.24.1.tar.xz
+  url: gnome_downloads:libpeas/1.25/libpeas-1.25.3.tar.xz
+  ref: 1c9bbb29740c29cd6e1dd0c9964722ff08cd5e6f68f1b5c135bc391a6ce97639
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libqmi.bst b/elements/core-deps/libqmi.bst
index cff8fa4d..06a75fe2 100644
--- a/elements/core-deps/libqmi.bst
+++ b/elements/core-deps/libqmi.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: https://www.freedesktop.org/software/libqmi/libqmi-1.24.2.tar.xz
+  url: https://www.freedesktop.org/software/libqmi/libqmi-1.24.4.tar.xz
+  ref: 0316badec92ff32f51fe6278e6046968d2272a26608995deedd8e4afb563918a
 depends:
 - core-deps/libgudev.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/librest.bst b/elements/core-deps/librest.bst
index b41fa27c..fea9e183 100644
--- a/elements/core-deps/librest.bst
+++ b/elements/core-deps/librest.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:rest/0.8/rest-0.8.1.tar.xz
+  ref: 0513aad38e5d3cedd4ae3c551634e3be1b9baaa79775e53b2dba9456f15b01c9
 depends:
 - sdk/glib.bst
 - filename: sdk/gobject-introspection.bst
diff --git a/elements/core-deps/libsass.bst b/elements/core-deps/libsass.bst
index a45ce9ef..c92ae2f8 100644
--- a/elements/core-deps/libsass.bst
+++ b/elements/core-deps/libsass.bst
@@ -9,3 +9,4 @@ depends:
 sources:
 - kind: tar
   url: https://github.com/sass/libsass/archive/3.5.0.tar.gz
+  ref: 9d499927329c7f8816ab67c571fb7cc0ea21d38c6f47c7c58c98de99ef7645eb
diff --git a/elements/core-deps/libsigcplusplus-2.0.bst b/elements/core-deps/libsigcplusplus-2.0.bst
index f3627e0a..c55a76b5 100644
--- a/elements/core-deps/libsigcplusplus-2.0.bst
+++ b/elements/core-deps/libsigcplusplus-2.0.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:libsigc++/2.10/libsigc++-2.10.2.tar.xz
+  ref: b1ca0253379596f9c19f070c83d362b12dfd39c0a3ea1dd813e8e21c1a097a98
 depends:
 - core-deps/mm-common.bst
 - filename: public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/libusb.bst b/elements/core-deps/libusb.bst
index 78c3fbc9..12986344 100644
--- a/elements/core-deps/libusb.bst
+++ b/elements/core-deps/libusb.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:libusb/libusb/releases/download/v1.0.21/libusb-1.0.21.tar.bz2
+  ref: 7dce9cce9a81194b7065ee912bcd55eeffebab694ea403ffb91b67db66b1824b
 depends:
 - filename: components/systemd.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libvirt-glib.bst b/elements/core-deps/libvirt-glib.bst
index 4b2041a3..c11727dc 100644
--- a/elements/core-deps/libvirt-glib.bst
+++ b/elements/core-deps/libvirt-glib.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: https://libvirt.org/sources/glib/libvirt-glib-2.0.0.tar.gz
+  url: https://libvirt.org/sources/glib/libvirt-glib-3.0.0.tar.gz
+  ref: 7fff8ca9a2b723dbfd04223b1c7624251c8bf79eb57ec27362a7301b2dd9ebfe
 depends:
 - filename: core-deps/intltool.bst
   type: build
diff --git a/elements/core-deps/libvirt.bst b/elements/core-deps/libvirt.bst
index 5fe515e9..cd432447 100644
--- a/elements/core-deps/libvirt.bst
+++ b/elements/core-deps/libvirt.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://libvirt.org/sources/libvirt-4.9.0.tar.xz
+  ref: 4fd4bfe7312b7996a817c7919cf0062de0d5b3c400c93bd30855a46c40dd455a
 depends:
 - core-deps/libnl.bst
 - core-deps/portablexdr.bst
diff --git a/elements/core-deps/libwacom.bst b/elements/core-deps/libwacom.bst
index 161dbc90..a30270d5 100644
--- a/elements/core-deps/libwacom.bst
+++ b/elements/core-deps/libwacom.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: sourceforge_net:linuxwacom/files/libwacom/libwacom-0.23.tar.bz2
+  ref: a08ac59ff26dbdf5888a6ad7bd97a66741807cda6bb1c7e7f299a555129c3162
 depends:
 - core-deps/libgudev.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/libxklavier.bst b/elements/core-deps/libxklavier.bst
index 3dfd449f..4547112f 100644
--- a/elements/core-deps/libxklavier.bst
+++ b/elements/core-deps/libxklavier.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: people_freedesktop_org:~svu/libxklavier-5.4.tar.bz2
+  ref: 17a34194df5cbcd3b7bfd0f561d95d1f723aa1c87fca56bc2c209514460a9320
 depends:
 - sdk/gobject-introspection.bst
 - filename: components/libxml2.bst
diff --git a/elements/core-deps/libyaml.bst b/elements/core-deps/libyaml.bst
index 31a0982a..80a8bb7c 100644
--- a/elements/core-deps/libyaml.bst
+++ b/elements/core-deps/libyaml.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:yaml/libyaml/archive/0.1.7.tar.gz
+  ref: e1884d0fa1eec8cf869ac6bebbf25391e81956aa2970267f974a9fa5e0b968e2
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/libzapojit.bst b/elements/core-deps/libzapojit.bst
index ce04c118..a6e8bae2 100644
--- a/elements/core-deps/libzapojit.bst
+++ b/elements/core-deps/libzapojit.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:libzapojit/0.0/libzapojit-0.0.3.tar.xz
+  ref: 3d25f99329105abb99d1e9651b0aa1842065456ea54c22970a7330e9f3d1c37e
 depends:
 - core-deps/gnome-online-accounts.bst
 - filename: core-deps/intltool.bst
diff --git a/elements/core-deps/lvm2.bst b/elements/core-deps/lvm2.bst
index fa91bace..aab38a63 100644
--- a/elements/core-deps/lvm2.bst
+++ b/elements/core-deps/lvm2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.sourceware.org/pub/lvm2/LVM2.2.02.177.tgz
+  ref: 4025a23ec9b15c2cb7486d151c29dc953b75efc4d452cfe9dbbc7c0fac8e80f2
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/mm-common.bst b/elements/core-deps/mm-common.bst
index 1ac7b3f2..b0836e11 100644
--- a/elements/core-deps/mm-common.bst
+++ b/elements/core-deps/mm-common.bst
@@ -19,6 +19,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:mm-common/0.9/mm-common-0.9.12.tar.xz
+  ref: ceffdcce1e5b52742884c233ec604bf6fded12eea9da077ce7a62c02c87e7c0b
 - kind: local
   path: files/mm-common/libstdc++.tag
   directory: doctags/
diff --git a/elements/core-deps/mobile-broadband-provider-info.bst 
b/elements/core-deps/mobile-broadband-provider-info.bst
index 381b2e64..b6d2e0c1 100644
--- a/elements/core-deps/mobile-broadband-provider-info.bst
+++ b/elements/core-deps/mobile-broadband-provider-info.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:mobile-broadband-provider-info/20190618/mobile-broadband-provider-info-20190618.tar.xz
+  ref: c22d64a565d1975b9eecb6ed2eeaef18634bc6f385c8137d05e845d8fb3cce5b
 depends:
 - filename: components/libxslt.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/mpc.bst b/elements/core-deps/mpc.bst
index aef74353..f0ad7b92 100644
--- a/elements/core-deps/mpc.bst
+++ b/elements/core-deps/mpc.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:mpc/mpc-1.1.0.tar.gz
+  ref: 6985c538143c1208dcb1ac42cedad6ff52e267b47e5f970183a3e75125b43c2e
 depends:
 - core-deps/mpfr.bst
 - filename: public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/mpfr.bst b/elements/core-deps/mpfr.bst
index 6c97596a..15c2ba55 100644
--- a/elements/core-deps/mpfr.bst
+++ b/elements/core-deps/mpfr.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:mpfr/mpfr-4.0.1.tar.xz
+  ref: 67874a60826303ee2fb6affc6dc0ddd3e749e9bfcb4c8655e3953d0458a6e16e
 depends:
 - filename: components/gmp.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/mtdev.bst b/elements/core-deps/mtdev.bst
index 23641ddf..9f2c0f65 100644
--- a/elements/core-deps/mtdev.bst
+++ b/elements/core-deps/mtdev.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://bitmath.org/code/mtdev/mtdev-1.1.5.tar.bz2
+  ref: 6677d5708a7948840de734d8b4675d5980d4561171c5a8e89e54adf7a13eba7f
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/ndctl.bst b/elements/core-deps/ndctl.bst
index 69ce9e7b..db7a3ec1 100644
--- a/elements/core-deps/ndctl.bst
+++ b/elements/core-deps/ndctl.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:pmem/ndctl/archive/v64.1.tar.gz
+  ref: 8ad95e2b46c157bda1e942be337fdeff0009ec928d45267d6e98fffce55103ef
 depends:
 - core-deps/json-c.bst
 - filename: vm/linux-vm-boot/kmod.bst
diff --git a/elements/core-deps/neon.bst b/elements/core-deps/neon.bst
index 41eda0aa..37e4ad25 100644
--- a/elements/core-deps/neon.bst
+++ b/elements/core-deps/neon.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://http.debian.net/debian/pool/main/n/neon27/neon27_0.30.2.orig.tar.gz
+  ref: db0bd8cdec329b48f53a6f00199c92d5ba40b0f015b153718d1b15d3d967fbca
 depends:
 - filename: components/expat.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/openldap.bst b/elements/core-deps/openldap.bst
index 037ffa7c..f7d19957 100644
--- a/elements/core-deps/openldap.bst
+++ b/elements/core-deps/openldap.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: http://openldap.org/software/download/OpenLDAP/openldap-release/openldap-2.4.45.tgz
+  ref: cdd6cffdebcd95161a73305ec13fc7a78e9707b46ca9f84fb897cd5626df3824
 depends:
 - core-deps/berkeleydb.bst
 - filename: components/groff.bst
diff --git a/elements/core-deps/osinfo-db-tools.bst b/elements/core-deps/osinfo-db-tools.bst
index 0f612a08..365af2ed 100644
--- a/elements/core-deps/osinfo-db-tools.bst
+++ b/elements/core-deps/osinfo-db-tools.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: https://releases.pagure.org/libosinfo/osinfo-db-tools-1.6.0.tar.gz
+  url: https://releases.pagure.org/libosinfo/osinfo-db-tools-1.7.0.tar.xz
+  ref: 4bddbec5f407436e0b62f0d7657e866adc980709acf5321aa0d4c3eb54aea823
 depends:
 - sdk/glib.bst
 - sdk/json-glib.bst
diff --git a/elements/core-deps/pangomm-1.4.bst b/elements/core-deps/pangomm-1.4.bst
index fd5cb5eb..f4a237b4 100644
--- a/elements/core-deps/pangomm-1.4.bst
+++ b/elements/core-deps/pangomm-1.4.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:pangomm/2.42/pangomm-2.42.0.tar.xz
+  ref: ca6da067ff93a6445780c0b4b226eb84f484ab104b8391fb744a45cbc7edbf56
 depends:
 - core-deps/cairomm-1.0.bst
 - core-deps/glibmm-2.4.bst
diff --git a/elements/core-deps/parted.bst b/elements/core-deps/parted.bst
index 034a84e9..23136694 100644
--- a/elements/core-deps/parted.bst
+++ b/elements/core-deps/parted.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: ftp_gnu_org:parted/parted-3.2.tar.xz
+  ref: 858b589c22297cacdf437f3baff6f04b333087521ab274f7ab677cb8c6bb78e4
 - kind: patch
   path: files/parted/include-sysmacros.patch
 depends:
diff --git a/elements/core-deps/phodav.bst b/elements/core-deps/phodav.bst
index 62372230..c625cdba 100644
--- a/elements/core-deps/phodav.bst
+++ b/elements/core-deps/phodav.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:phodav/2.3/phodav-2.3.tar.xz
+  ref: 6ef61e624c30a42fb720ef7ade7447e9ba922d69024b0326dc072fa3362ebe59
 depends:
 - core-deps/avahi.bst
 - core-deps/libgudev.bst
diff --git a/elements/core-deps/polkit.bst b/elements/core-deps/polkit.bst
index 910e91d2..e992d3f5 100644
--- a/elements/core-deps/polkit.bst
+++ b/elements/core-deps/polkit.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.freedesktop.org/software/polkit/releases/polkit-0.116.tar.gz
+  ref: 88170c9e711e8db305a12fdb8234fac5706c61969b94e084d0f117d8ec5d34b1
 - kind: local
   path: files/polkit/sysusers.conf
   directory: data
diff --git a/elements/core-deps/poppler.bst b/elements/core-deps/poppler.bst
index 9e72cf62..56975f88 100644
--- a/elements/core-deps/poppler.bst
+++ b/elements/core-deps/poppler.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: https://poppler.freedesktop.org/poppler-0.82.0.tar.xz
+  ref: 234f8e573ea57fb6a008e7c1e56bfae1af5d1adf0e65f47555e1ae103874e4df
 depends:
 - sdk/gobject-introspection.bst
 - sdk/openjpeg.bst
diff --git a/elements/core-deps/portablexdr.bst b/elements/core-deps/portablexdr.bst
index 51d692be..e108a5cc 100644
--- a/elements/core-deps/portablexdr.bst
+++ b/elements/core-deps/portablexdr.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tarballs_needing_help:portablexdr-4.9.1.tar.gz
+  ref: 5cf4bdd153cf4d44eaf10b725f451d0cfadc070b4b9a9ccfb64094b8f78de72c
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/portaudio.bst b/elements/core-deps/portaudio.bst
index fb127516..84089332 100644
--- a/elements/core-deps/portaudio.bst
+++ b/elements/core-deps/portaudio.bst
@@ -3,6 +3,7 @@ kind: cmake
 sources:
 - kind: tar
   url: http://www.portaudio.com/archives/pa_stable_v190600_20161030.tgz
+  ref: f5a21d7dcd6ee84397446fa1fa1a0675bb2e8a4a6dceb4305a8404698d8d1513
 depends:
 - filename: public-stacks/buildsystem-cmake.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/ppp.bst b/elements/core-deps/ppp.bst
index b3d8d7ce..fc9b074d 100644
--- a/elements/core-deps/ppp.bst
+++ b/elements/core-deps/ppp.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_download:teams/releng/tarballs-needing-help/ppp/ppp-2.4.7.tar.gz
+  ref: 02e0a3dd3e4799e33103f70ec7df75348c8540966ee7c948e4ed8a42bbccfb30
 - kind: patch
   path: files/ppp/use-openssl.patch
 depends:
@@ -13,4 +14,5 @@ depends:
 variables:
   # not a real autotools project
   autogen: ''
-  make-install: make -j1 INSTROOT="%{install-root}" BINDIR="%{install-root}%{bindir}" install
+  make-install: make -j1 INSTROOT="%{install-root}" BINDIR="%{install-root}%{bindir}"
+    install
diff --git a/elements/core-deps/pyatspi2.bst b/elements/core-deps/pyatspi2.bst
index 0a5852df..45128cb3 100644
--- a/elements/core-deps/pyatspi2.bst
+++ b/elements/core-deps/pyatspi2.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: gnome_downloads:pyatspi/2.34/pyatspi-2.34.0.tar.xz
+  url: gnome_downloads:pyatspi/2.35/pyatspi-2.35.1.tar.xz
+  ref: 86e608f7a8a2f9877084ed3848700757acea660a55a219214ba0ce9f8764311a
 depends:
 - sdk/at-spi2-core.bst
 - sdk/pygobject.bst
diff --git a/elements/core-deps/rpcsvc-proto.bst b/elements/core-deps/rpcsvc-proto.bst
index 230be48e..748544cf 100644
--- a/elements/core-deps/rpcsvc-proto.bst
+++ b/elements/core-deps/rpcsvc-proto.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:thkukuk/rpcsvc-proto/archive/v1.3.1.tar.gz
+  ref: 95219e83e11aba0abb4149d3e997e5fc8060912dde10af4d9f41fc1d79c7a919
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/samba.bst b/elements/core-deps/samba.bst
index 77d291f3..3ad0d44b 100644
--- a/elements/core-deps/samba.bst
+++ b/elements/core-deps/samba.bst
@@ -2,6 +2,7 @@ kind: manual
 sources:
 - kind: tar
   url: gnome_download:teams/releng/tarballs-needing-help/samba/samba-4.10.2.tar.gz
+  ref: 878cfdc51b74fafb604399c381c690b325061eb63fc17a188a505e96fa8f5e84
 - kind: patch
   path: files/samba/fix-root-build.patch
 depends:
@@ -28,17 +29,17 @@ depends:
 config:
   configure-commands:
   - ./configure --enable-fhs --prefix=%{prefix} --exec-prefix=%{exec_prefix} --bindir=%{bindir}
-      --sbindir=%{sbindir} --sysconfdir=%{sysconfdir} --datadir=%{datadir}
-      --includedir=%{includedir} --libdir=%{libdir} --libexecdir=%{libexecdir}
-      --localstatedir=%{localstatedir} --sharedstatedir=%{sharedstatedir}
-      --mandir=%{mandir} --infodir=%{infodir} --without-ad-dc --without-json
+    --sbindir=%{sbindir} --sysconfdir=%{sysconfdir} --datadir=%{datadir} --includedir=%{includedir}
+    --libdir=%{libdir} --libexecdir=%{libexecdir} --localstatedir=%{localstatedir}
+    --sharedstatedir=%{sharedstatedir} --mandir=%{mandir} --infodir=%{infodir} --without-ad-dc
+    --without-json
   build-commands:
   - make
   install-commands:
   - DESTDIR=%{install-root} make install
 environment:
   MAKEFLAGS: -j%{max-jobs}
-  V: 1
+  V: '1'
 environment-nocache:
 - MAKEFLAGS
 - V
diff --git a/elements/core-deps/sane-backends.bst b/elements/core-deps/sane-backends.bst
index c4ed7f07..ab4e6243 100644
--- a/elements/core-deps/sane-backends.bst
+++ b/elements/core-deps/sane-backends.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: 
https://gitlab.com/sane-project/backends/uploads/a3ba9fff29253a94e84074917bff581a/sane-backends-1.0.27.tar.gz
+  ref: 293747bf37275c424ebb2c833f8588601a60b2f9653945d5a3194875355e36c9
 depends:
 - core-deps/libusb.bst
 - filename: public-stacks/buildsystem-autotools.bst
diff --git a/elements/core-deps/sassc.bst b/elements/core-deps/sassc.bst
index 9fc12054..11b28dd8 100644
--- a/elements/core-deps/sassc.bst
+++ b/elements/core-deps/sassc.bst
@@ -9,3 +9,4 @@ depends:
 sources:
 - kind: tar
   url: https://github.com/sass/sassc/releases/download/3.4.8/sassc-3.4.8.tar.gz
+  ref: d61587b6c084a54e602650c1d845928a20c8d309a0eeec6b1d2499489867ce03
diff --git a/elements/core-deps/speech-dispatcher.bst b/elements/core-deps/speech-dispatcher.bst
index 8ee180d8..536b5a55 100644
--- a/elements/core-deps/speech-dispatcher.bst
+++ b/elements/core-deps/speech-dispatcher.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:brailcom/speechd/releases/download/0.9.0/speech-dispatcher-0.9.0.tar.gz
+  ref: 73b924f42fcc2155a452693320956f7075b71750023ea21e8bb79822c0caa2f9
 depends:
 - sdk/glib.bst
 - core-deps/dotconf.bst
diff --git a/elements/core-deps/spice-gtk.bst b/elements/core-deps/spice-gtk.bst
index 1ddc4c8b..63e4319d 100644
--- a/elements/core-deps/spice-gtk.bst
+++ b/elements/core-deps/spice-gtk.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: spice:gtk/spice-gtk-0.36.tar.bz2
+  ref: 7126c3584df12d40dcf4970f5f46fafd65b757620f911687e549f7da5c8fd7cd
 depends:
 - core-deps/phodav.bst
 - core-deps/spice-protocol.bst
diff --git a/elements/core-deps/spice-protocol.bst b/elements/core-deps/spice-protocol.bst
index 605002ef..7403e7bb 100644
--- a/elements/core-deps/spice-protocol.bst
+++ b/elements/core-deps/spice-protocol.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: spice:releases/spice-protocol-0.12.15.tar.bz2
+  ref: 8b4db23baa4b1337a50d049d9bf43f932331dd95f204836c0ce46c4962306419
 depends:
 - filename: public-stacks/buildsystem-autotools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/startup-notification.bst b/elements/core-deps/startup-notification.bst
index 1bb915f0..997ed177 100644
--- a/elements/core-deps/startup-notification.bst
+++ b/elements/core-deps/startup-notification.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:startup-notification/0.12/startup-notification-0.12.tar.xz
+  ref: 4bd1363a2f3b3eb2c4f7fc33b4977bb9c12b4741206f05109b0ff2b3b30b6bc0
 depends:
 - filename: components/xcb-util.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core-deps/totem-pl-parser.bst b/elements/core-deps/totem-pl-parser.bst
index 84b3d7fe..64023935 100644
--- a/elements/core-deps/totem-pl-parser.bst
+++ b/elements/core-deps/totem-pl-parser.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:totem-pl-parser/3.26/totem-pl-parser-3.26.4.tar.xz
+  ref: c1576f551a67c2b3632a3dbea5d8b3e9966558af0cfeed58f07cec04728364f0
 depends:
 - core-deps/gmime3.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/tracker-miners.bst b/elements/core-deps/tracker-miners.bst
index 2885deff..570a6b85 100644
--- a/elements/core-deps/tracker-miners.bst
+++ b/elements/core-deps/tracker-miners.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:tracker-miners/2.3/tracker-miners-2.3.1.tar.xz
+  ref: 7b1de06a7a79ea1c7813c8a21f8cd1c55f2b95f799cf9f47f0204f3be8a590e0
 depends:
 - core-deps/NetworkManager.bst
 - core-deps/gexiv2.bst
diff --git a/elements/core-deps/tracker.bst b/elements/core-deps/tracker.bst
index 0d5ce6a8..85238746 100644
--- a/elements/core-deps/tracker.bst
+++ b/elements/core-deps/tracker.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:tracker/2.3/tracker-2.3.1.tar.xz
+  ref: b6748726e465ad2f4d991560634b1fd0df8841f3d981b3b837c4162abedf08a1
 depends:
 - core-deps/NetworkManager.bst
 - core-deps/upower.bst
diff --git a/elements/core-deps/udisks2.bst b/elements/core-deps/udisks2.bst
index e48cf62d..3a224c8e 100644
--- a/elements/core-deps/udisks2.bst
+++ b/elements/core-deps/udisks2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:storaged-project/udisks/releases/download/udisks-2.8.2/udisks-2.8.2.tar.bz2
+  ref: 3d233bc8ddac1b84338280e912ca31b613aadd1efca68a9717f818bb3b038bb6
 depends:
 - core-deps/blockdev.bst
 - core-deps/libatasmart.bst
diff --git a/elements/core-deps/uhttpmock.bst b/elements/core-deps/uhttpmock.bst
index 3c015fef..001dd5a3 100644
--- a/elements/core-deps/uhttpmock.bst
+++ b/elements/core-deps/uhttpmock.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://tecnocode.co.uk/downloads/uhttpmock/uhttpmock-0.5.1.tar.xz
+  ref: a6a34a011db142a98473b492039c84468d575f416689484f1f82a84927f17798
 depends:
 - sdk/glib.bst
 - filename: sdk/gtk-doc.bst
diff --git a/elements/core-deps/upower.bst b/elements/core-deps/upower.bst
index ec8a7374..38f046de 100644
--- a/elements/core-deps/upower.bst
+++ b/elements/core-deps/upower.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: 
https://gitlab.freedesktop.org/upower/upower/uploads/93cfe7c8d66ed486001c4f3f55399b7a/upower-0.99.11.tar.xz
+  ref: 64b5ffbfccd5bdb15d925777979a4dbee1a957f9eaeb158dc76175267eddbdef
 depends:
 - core-deps/libgudev.bst
 - core-deps/libusb.bst
diff --git a/elements/core-deps/volume-key.bst b/elements/core-deps/volume-key.bst
index e414e136..661c924c 100644
--- a/elements/core-deps/volume-key.bst
+++ b/elements/core-deps/volume-key.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://releases.pagure.org/volume_key/volume_key-0.3.12.tar.xz
+  ref: 6ca3748fc1dad22c450bbf6601d4e706cb11c5e662d11bb4aeb473a9cd77309b
 depends:
 - core-deps/cryptsetup.bst
 - sdk/glib.bst
diff --git a/elements/core-deps/xmlb.bst b/elements/core-deps/xmlb.bst
index 88755487..86b064ec 100644
--- a/elements/core-deps/xmlb.bst
+++ b/elements/core-deps/xmlb.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://github.com/hughsie/libxmlb/archive/0.1.7.tar.gz
+  ref: 34be33bb90b521c02ed53c359f088259a74ca75becb422d015f6f38e96a42245
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core-deps/xmlto.bst b/elements/core-deps/xmlto.bst
index aa02c09e..fb3dbe9e 100644
--- a/elements/core-deps/xmlto.bst
+++ b/elements/core-deps/xmlto.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://releases.pagure.org/xmlto/xmlto-0.0.28.tar.bz2
+  ref: 1130df3a7957eb9f6f0d29e4aa1c75732a7dfb6d639be013859b5c7ec5421276
 depends:
 - filename: components/util-linux.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/core/baobab.bst b/elements/core/baobab.bst
index bdfb084f..d55458c2 100644
--- a/elements/core/baobab.bst
+++ b/elements/core/baobab.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:baobab/3.34/baobab-3.34.0.tar.xz
+  ref: 46ebd9466da6a68c340653e9095f1e905b6fac79305879a9e644634f7da98607
 depends:
 - sdk/adwaita-icon-theme.bst
 - sdk/appstream-glib.bst
diff --git a/elements/core/cheese.bst b/elements/core/cheese.bst
index b51e35d0..096e1719 100644
--- a/elements/core/cheese.bst
+++ b/elements/core/cheese.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:cheese/3.34/cheese-3.34.0.tar.xz
+  ref: d1865600ac88012e136b1ec3db72a4634f57bc2035895277be792bb078627e73
 depends:
 - core-deps/gnome-video-effects.bst
 - core-deps/libgudev.bst
diff --git a/elements/core/eog.bst b/elements/core/eog.bst
index cdbb39d7..7d4911cd 100644
--- a/elements/core/eog.bst
+++ b/elements/core/eog.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:eog/3.34/eog-3.34.2.tar.xz
+  ref: 6f2b0570541ced1cc31c4e8bbfe4b19e975d56d2a49052c5942a188cac35a9d3
 depends:
 - core-deps/exempi.bst
 - core-deps/libpeas.bst
diff --git a/elements/core/epiphany.bst b/elements/core/epiphany.bst
index 02a0549f..a454e827 100644
--- a/elements/core/epiphany.bst
+++ b/elements/core/epiphany.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:epiphany/3.34/epiphany-3.34.3.1.tar.xz
+  url: gnome_downloads:epiphany/3.34/epiphany-3.34.4.tar.xz
+  ref: 60e190fc07ec7e33472e60c7e633e04004f7e277a0ffc5e9cd413706881e598d
 depends:
 - core-deps/libdazzle.bst
 - core-deps/libhandy.bst
diff --git a/elements/core/evince.bst b/elements/core/evince.bst
index 0bb0f871..52b3b495 100644
--- a/elements/core/evince.bst
+++ b/elements/core/evince.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:evince/3.34/evince-3.34.2.tar.xz
+  ref: 3cc0955f11204e3a2db1c7ab99b866692749592257485b87304134ad69da0617
 depends:
 - core-deps/gspell.bst
 - core-deps/libgxps.bst
diff --git a/elements/core/file-roller.bst b/elements/core/file-roller.bst
index 76bee01d..f7382ee1 100644
--- a/elements/core/file-roller.bst
+++ b/elements/core/file-roller.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:file-roller/3.32/file-roller-3.32.3.tar.xz
+  url: gnome_downloads:file-roller/3.32/file-roller-3.32.4.tar.xz
+  ref: 1b3b2cbfcb444e0d150bfd063add9d5181c8ab24f0593e5a8894399297214017
 depends:
 - sdk/adwaita-icon-theme.bst
 - sdk/glib.bst
diff --git a/elements/core/gdm.bst b/elements/core/gdm.bst
index 728e5f29..c5b15fb5 100644
--- a/elements/core/gdm.bst
+++ b/elements/core/gdm.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gdm/3.34/gdm-3.34.1.tar.xz
+  ref: e85df657aa8d9361af4fb122014d8f123a93bfe45a7662fba2b373d839dbd8d3
 depends:
 - core-deps/accountsservice.bst
 - core-deps/upower.bst
diff --git a/elements/core/gedit.bst b/elements/core/gedit.bst
index b56faac6..155294b8 100644
--- a/elements/core/gedit.bst
+++ b/elements/core/gedit.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gedit/3.34/gedit-3.34.1.tar.xz
+  ref: ebf9ef4e19831699d26bb93ce029edfed65416d7c11147835fc370d73428d5c6
 depends:
 - core-deps/gspell.bst
 - core-deps/gtksourceview.bst
diff --git a/elements/core/gnome-backgrounds.bst b/elements/core/gnome-backgrounds.bst
index 11bff2ba..45b07aee 100644
--- a/elements/core/gnome-backgrounds.bst
+++ b/elements/core/gnome-backgrounds.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-backgrounds/3.34/gnome-backgrounds-3.34.0.tar.xz
+  ref: c2b7fb6db98c05e205053daaa7f58c7f06ff91b45c4006052af17c578ae7b47f
 depends:
 - sdk/glib.bst
 - filename: public-stacks/buildsystem-meson.bst
diff --git a/elements/core/gnome-bluetooth.bst b/elements/core/gnome-bluetooth.bst
index 7300be16..e5fa8914 100644
--- a/elements/core/gnome-bluetooth.bst
+++ b/elements/core/gnome-bluetooth.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-bluetooth/3.34/gnome-bluetooth-3.34.0.tar.xz
+  ref: e867e67423e1dc78c56c2ea11dec066ce0254238d559e4777c80fa2935eb6baf
 depends:
 - sdk/glib.bst
 - sdk/gtk+-3.bst
diff --git a/elements/core/gnome-boxes.bst b/elements/core/gnome-boxes.bst
index 6c7af3be..58e32ec4 100644
--- a/elements/core/gnome-boxes.bst
+++ b/elements/core/gnome-boxes.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-boxes/3.34/gnome-boxes-3.34.3.tar.xz
+  ref: 8a8fa5b13d14ff75b0224702ea6ec350ae43b801bc89207ffe1415b3f4c3f0c7
 depends:
 - core-deps/gtk-vnc.bst
 - core-deps/libgovirt.bst
diff --git a/elements/core/gnome-calculator.bst b/elements/core/gnome-calculator.bst
index 682192d4..2257f5aa 100644
--- a/elements/core/gnome-calculator.bst
+++ b/elements/core/gnome-calculator.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-calculator/3.34/gnome-calculator-3.34.1.tar.xz
+  ref: 4d5348c2fbf01d040a2cb5e84de812c503911e1ea498a83e7eefff52c4417051
 depends:
 - core-deps/gtksourceview.bst
 - core-deps/mpc.bst
diff --git a/elements/core/gnome-calendar.bst b/elements/core/gnome-calendar.bst
index c958b524..d1244e2e 100644
--- a/elements/core/gnome-calendar.bst
+++ b/elements/core/gnome-calendar.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-calendar/3.34/gnome-calendar-3.34.2.tar.xz
+  ref: 3ca32c2354461f1728e54a14f38fc3a9e052f579bb3893a7b09f10105268d5ae
 depends:
 - core-deps/evolution-data-server.bst
 - core-deps/gnome-online-accounts.bst
diff --git a/elements/core/gnome-characters.bst b/elements/core/gnome-characters.bst
index c657c46e..6ee8a548 100644
--- a/elements/core/gnome-characters.bst
+++ b/elements/core/gnome-characters.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-characters/3.32/gnome-characters-3.32.1.tar.xz
+  ref: 5a9225ad527f9e185d3f1beb84e358a6571578aaeb75f47c4e07cdd48b08efd6
 depends:
 - sdk/adwaita-icon-theme.bst
 - sdk/appstream-glib.bst
diff --git a/elements/core/gnome-clocks.bst b/elements/core/gnome-clocks.bst
index a2f3cc65..d167226d 100644
--- a/elements/core/gnome-clocks.bst
+++ b/elements/core/gnome-clocks.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-clocks/3.34/gnome-clocks-3.34.0.tar.xz
+  ref: 61195f357c63b65b75e209494e12a122a802c75333290e136813565dca94f03c
 depends:
 - core-deps/geocode-glib.bst
 - core-deps/gsound.bst
diff --git a/elements/core/gnome-color-manager.bst b/elements/core/gnome-color-manager.bst
index b95dd4aa..b87de69a 100644
--- a/elements/core/gnome-color-manager.bst
+++ b/elements/core/gnome-color-manager.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-color-manager/3.32/gnome-color-manager-3.32.0.tar.xz
+  ref: 7c3c178faacfcbf11d56de22cd265946a7d58aa10e3cd968c2938e2fbf50fdee
 depends:
 - core-deps/colord-gtk.bst
 - core-deps/exiv2.bst
diff --git a/elements/core/gnome-contacts.bst b/elements/core/gnome-contacts.bst
index 6fff1e21..59591c7d 100644
--- a/elements/core/gnome-contacts.bst
+++ b/elements/core/gnome-contacts.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-contacts/3.34/gnome-contacts-3.34.1.tar.xz
+  ref: 0a83c7d8ea27291222ae053d6d5e5506744ebdcf4b6e70defb5deeebb32f1ccb
 depends:
 - core-deps/folks.bst
 - core-deps/gnome-online-accounts.bst
diff --git a/elements/core/gnome-control-center.bst b/elements/core/gnome-control-center.bst
index d038bd35..91c9b39f 100644
--- a/elements/core/gnome-control-center.bst
+++ b/elements/core/gnome-control-center.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:gnome-control-center/3.34/gnome-control-center-3.34.2.tar.xz
+  url: gnome_downloads:gnome-control-center/3.34/gnome-control-center-3.34.4.tar.xz
+  ref: 17ea6db4b9cee75e99e77f0161a0e5209a3b86444ae775c2068ec192aba6272e
 depends:
 - core-deps/ModemManager.bst
 - core-deps/NetworkManager.bst
diff --git a/elements/core/gnome-desktop.bst b/elements/core/gnome-desktop.bst
index 6025a424..d3b29d7a 100644
--- a/elements/core/gnome-desktop.bst
+++ b/elements/core/gnome-desktop.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:gnome-desktop/3.34/gnome-desktop-3.34.3.tar.xz
+  url: gnome_downloads:gnome-desktop/3.34/gnome-desktop-3.34.4.tar.xz
+  ref: c53e72737cc21535f2fd4b72bc2fb5594741cfc3d3ce90949bc5cc07bade0cbc
 depends:
 - core-deps/libgudev.bst
 - sdk/gdk-pixbuf.bst
diff --git a/elements/core/gnome-disk-utility.bst b/elements/core/gnome-disk-utility.bst
index 3740a8b9..92d67ab0 100644
--- a/elements/core/gnome-disk-utility.bst
+++ b/elements/core/gnome-disk-utility.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:gnome-disk-utility/3.34/gnome-disk-utility-3.34.0.tar.xz
+  url: gnome_downloads:gnome-disk-utility/3.34/gnome-disk-utility-3.34.4.tar.xz
+  ref: 1ec5a365292016572d336c31b252f726dd86655b0a93eab7be3b3c18ab8bf75c
 depends:
 - core-deps/libdvdread.bst
 - core-deps/udisks2.bst
diff --git a/elements/core/gnome-font-viewer.bst b/elements/core/gnome-font-viewer.bst
index 9f57d08f..02c398eb 100644
--- a/elements/core/gnome-font-viewer.bst
+++ b/elements/core/gnome-font-viewer.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-font-viewer/3.34/gnome-font-viewer-3.34.0.tar.xz
+  ref: aa6f0583e5f93aec095e537f0638b29de3d02491f0131ef584a7c55d39d6b98b
 depends:
 - core/gnome-desktop.bst
 - sdk/adwaita-icon-theme.bst
diff --git a/elements/core/gnome-getting-started-docs.bst b/elements/core/gnome-getting-started-docs.bst
index 77cf17e3..fbbb3dc1 100644
--- a/elements/core/gnome-getting-started-docs.bst
+++ b/elements/core/gnome-getting-started-docs.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gnome-getting-started-docs/3.34/gnome-getting-started-docs-3.34.1.tar.xz
+  ref: ca998f144e2aab81aa7cf6a09202caf650005965d68187baa7aa5d0198373602
 depends:
 - sdk/yelp-tools.bst
 - filename: public-stacks/buildsystem-autotools.bst
diff --git a/elements/core/gnome-initial-setup.bst b/elements/core/gnome-initial-setup.bst
index dc967bca..bd743f73 100644
--- a/elements/core/gnome-initial-setup.bst
+++ b/elements/core/gnome-initial-setup.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-initial-setup/3.34/gnome-initial-setup-3.34.3.tar.xz
+  ref: 33f9ceb2d65800644c6d6430bbb1d0f4387a062684014cba836d9fbc593d88b5
 depends:
 - core-deps/NetworkManager.bst
 - core-deps/accountsservice.bst
diff --git a/elements/core/gnome-keyring.bst b/elements/core/gnome-keyring.bst
index f5c98478..8ea5c48e 100644
--- a/elements/core/gnome-keyring.bst
+++ b/elements/core/gnome-keyring.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gnome-keyring/3.34/gnome-keyring-3.34.0.tar.xz
+  ref: e9cda9542a3e37c61636145e7e9e2513c569092ea8020752a834e1f40ad41943
 depends:
 - sdk/gcr.bst
 - sdk/glib.bst
diff --git a/elements/core/gnome-logs.bst b/elements/core/gnome-logs.bst
index 4f77b621..c23e9f65 100644
--- a/elements/core/gnome-logs.bst
+++ b/elements/core/gnome-logs.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-logs/3.34/gnome-logs-3.34.0.tar.xz
+  ref: 15f4af7085c88321624dc9416f07e7f997fc0fe4c6dd585bce512b11d2e34e9a
 depends:
 - sdk/adwaita-icon-theme.bst
 - sdk/appstream-glib.bst
diff --git a/elements/core/gnome-maps.bst b/elements/core/gnome-maps.bst
index 939cd7f2..6132d9db 100644
--- a/elements/core/gnome-maps.bst
+++ b/elements/core/gnome-maps.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-maps/3.34/gnome-maps-3.34.3.tar.xz
+  ref: bcf98f55ff51170144c93eedba4b50de708bbc11c9bd4036b52649dc108da8dc
 depends:
 - core-deps/folks.bst
 - core-deps/geocode-glib.bst
diff --git a/elements/core/gnome-menus.bst b/elements/core/gnome-menus.bst
index 8b9a4856..efd4481c 100644
--- a/elements/core/gnome-menus.bst
+++ b/elements/core/gnome-menus.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gnome-menus/3.32/gnome-menus-3.32.0.tar.xz
+  ref: c850c64b2074265fe59e099a340b8689cf3dd4658dc9feddd2ab5e95f1a74b74
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/core/gnome-music.bst b/elements/core/gnome-music.bst
index 2ab9ece7..3e907ba0 100644
--- a/elements/core/gnome-music.bst
+++ b/elements/core/gnome-music.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:gnome-music/3.34/gnome-music-3.34.3.tar.xz
+  url: gnome_downloads:gnome-music/3.34/gnome-music-3.34.4.tar.xz
+  ref: 66f5248ea504e818ca8a21de2721dd42e9b1a8961a2adee5c57836278b5352d0
 depends:
 - core-deps/grilo-plugins.bst
 - core-deps/grilo.bst
diff --git a/elements/core/gnome-photos.bst b/elements/core/gnome-photos.bst
index 341c347e..b7140d6b 100644
--- a/elements/core/gnome-photos.bst
+++ b/elements/core/gnome-photos.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:gnome-photos/3.34/gnome-photos-3.34.0.tar.xz
+  url: gnome_downloads:gnome-photos/3.34/gnome-photos-3.34.1.tar.xz
+  ref: b7bd836be826e33f95b503493fc887c515c60b5bf332d75ab736b9db2b44d5c5
 depends:
 - core-deps/babl.bst
 - core-deps/gegl.bst
diff --git a/elements/core/gnome-screenshot.bst b/elements/core/gnome-screenshot.bst
index d1387893..2b5f010f 100644
--- a/elements/core/gnome-screenshot.bst
+++ b/elements/core/gnome-screenshot.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-screenshot/3.34/gnome-screenshot-3.34.0.tar.xz
+  ref: c80af5f7a2bed4348585eb18dc4e60af5beba4f13d8ccf6ab1ee1d0912c2b1e6
 depends:
 - sdk/adwaita-icon-theme.bst
 - sdk/appstream-glib.bst
diff --git a/elements/core/gnome-session.bst b/elements/core/gnome-session.bst
index 8c50f4f5..117ae785 100644
--- a/elements/core/gnome-session.bst
+++ b/elements/core/gnome-session.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-session/3.34/gnome-session-3.34.2.tar.xz
+  ref: 8bb77381650a03ae4be7260751363bd27da93f09bac1ddbc885f4ce44ebaf8e1
 depends:
 - core-deps/upower.bst
 - core-deps/xmlto.bst
diff --git a/elements/core/gnome-settings-daemon.bst b/elements/core/gnome-settings-daemon.bst
index b950b7cb..2c40fe1a 100644
--- a/elements/core/gnome-settings-daemon.bst
+++ b/elements/core/gnome-settings-daemon.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-settings-daemon/3.34/gnome-settings-daemon-3.34.2.tar.xz
+  ref: 9fbae67e217e53b99e4f9e7d392c91ffbe31253941c9b136ef09c2d9db7ad7ed
 depends:
 - core-deps/ModemManager.bst
 - core-deps/NetworkManager.bst
diff --git a/elements/core/gnome-shell-extensions.bst b/elements/core/gnome-shell-extensions.bst
index 6d5143b2..8cbb6ca9 100644
--- a/elements/core/gnome-shell-extensions.bst
+++ b/elements/core/gnome-shell-extensions.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-shell-extensions/3.34/gnome-shell-extensions-3.34.2.tar.xz
+  ref: a1e16e75a06ea511435a6f7478de92aff21d02d4e1d59ec8ce7fb6396819b4b8
 depends:
 - core/gnome-menus.bst
 - core/gnome-shell.bst
diff --git a/elements/core/gnome-shell.bst b/elements/core/gnome-shell.bst
index d0c0bd92..3fa37c1c 100644
--- a/elements/core/gnome-shell.bst
+++ b/elements/core/gnome-shell.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:gnome-shell/3.34/gnome-shell-3.34.3.tar.xz
+  url: gnome_downloads:gnome-shell/3.34/gnome-shell-3.34.4.tar.xz
+  ref: e99cfb151307e1d5e5dff57b7026cf8aeace9d595a8c9e62537e934d0f14a366
 depends:
 - core-deps/NetworkManager.bst
 - core-deps/accountsservice.bst
diff --git a/elements/core/gnome-software.bst b/elements/core/gnome-software.bst
index b477c012..849836ae 100644
--- a/elements/core/gnome-software.bst
+++ b/elements/core/gnome-software.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-software/3.34/gnome-software-3.34.2.tar.xz
+  ref: a7da2ec0ae958cc6b2151065a2d561a274547db83934f153751c6078e73711fe
 depends:
 - core-deps/PackageKit.bst
 - core-deps/gspell.bst
diff --git a/elements/core/gnome-system-monitor.bst b/elements/core/gnome-system-monitor.bst
index 8bc0bc8f..1149b809 100644
--- a/elements/core/gnome-system-monitor.bst
+++ b/elements/core/gnome-system-monitor.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-system-monitor/3.32/gnome-system-monitor-3.32.1.tar.xz
+  ref: 48c131335091bd927862f40ef56400f997981df2acfc82abea662bf91a1ea4f1
 depends:
 - core-deps/gtkmm-3.bst
 - core-deps/libgtop.bst
diff --git a/elements/core/gnome-terminal.bst b/elements/core/gnome-terminal.bst
index e8cdb27a..b15769fc 100644
--- a/elements/core/gnome-terminal.bst
+++ b/elements/core/gnome-terminal.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gnome-terminal/3.34/gnome-terminal-3.34.2.tar.xz
+  ref: 3bd723f4058ec014da4715db4181b7d73eccc797b85ad5e6236996951c01803d
 depends:
 - filename: core-deps/intltool.bst
   type: build
diff --git a/elements/core/gnome-themes-extra.bst b/elements/core/gnome-themes-extra.bst
index 52231d01..5ecdc3ed 100644
--- a/elements/core/gnome-themes-extra.bst
+++ b/elements/core/gnome-themes-extra.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gnome-themes-extra/3.28/gnome-themes-extra-3.28.tar.xz
+  ref: 7c4ba0bff001f06d8983cfc105adaac42df1d1267a2591798a780bac557a5819
 depends:
 - filename: core-deps/intltool.bst
   type: build
diff --git a/elements/core/gnome-user-docs.bst b/elements/core/gnome-user-docs.bst
index 88130e8a..b0eef32e 100644
--- a/elements/core/gnome-user-docs.bst
+++ b/elements/core/gnome-user-docs.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gnome-user-docs/3.34/gnome-user-docs-3.34.1.tar.xz
+  ref: c2edd9d633f6f2a5fd8d5580e169d0e07de64d5d5b12a81ecbd64331d176a986
 depends:
 - sdk/yelp-tools.bst
 - filename: public-stacks/buildsystem-autotools.bst
diff --git a/elements/core/gnome-weather.bst b/elements/core/gnome-weather.bst
index d364ce28..329cb4ef 100644
--- a/elements/core/gnome-weather.bst
+++ b/elements/core/gnome-weather.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gnome-weather/3.34/gnome-weather-3.34.0.tar.xz
+  ref: 24867e21fcb92b81cd0cf09bbf8bc216ccc55d9a66ac21928b66c413f4efc3bc
 depends:
 - core-deps/libgweather.bst
 - sdk/adwaita-icon-theme.bst
diff --git a/elements/core/mutter.bst b/elements/core/mutter.bst
index 79fc9953..c0f6dc0e 100644
--- a/elements/core/mutter.bst
+++ b/elements/core/mutter.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:mutter/3.34/mutter-3.34.3.tar.xz
+  url: gnome_downloads:mutter/3.34/mutter-3.34.4.tar.xz
+  ref: 0134513515f605dd0858154d0b54d2e23c5779d52590533e266d407251e20ba2
 depends:
 - core/gnome-settings-daemon.bst
 - core-deps/startup-notification.bst
diff --git a/elements/core/nautilus.bst b/elements/core/nautilus.bst
index 7735ce61..b99d04e6 100644
--- a/elements/core/nautilus.bst
+++ b/elements/core/nautilus.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:nautilus/3.34/nautilus-3.34.2.tar.xz
+  ref: bb06e226b965f479a0b8668c19c8e1762b9d8f039af6817961cc7a8f09e6f8a7
 depends:
 - core-deps/gexiv2.bst
 - core-deps/gnome-autoar.bst
diff --git a/elements/core/network-manager-applet.bst b/elements/core/network-manager-applet.bst
index be462e2b..1111a56c 100644
--- a/elements/core/network-manager-applet.bst
+++ b/elements/core/network-manager-applet.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:network-manager-applet/1.8/network-manager-applet-1.8.24.tar.xz
+  ref: 118bbb8a5027634b62e8b45b16ceafce74441529c99bf230654e3bec38f9fbbf
 depends:
 - core-deps/ModemManager.bst
 - core-deps/NetworkManager.bst
diff --git a/elements/core/orca.bst b/elements/core/orca.bst
index 156b4056..296f0ccd 100644
--- a/elements/core/orca.bst
+++ b/elements/core/orca.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: gnome_downloads:orca/3.34/orca-3.34.1.tar.xz
+  url: gnome_downloads:orca/3.34/orca-3.34.2.tar.xz
+  ref: 56353265dc6e69ffa3650466c2d784beb84d0816e2d5d5747ed1ed5ed17f4a29
 depends:
 - core-deps/pyatspi2.bst
 - core-deps/speech-dispatcher.bst
diff --git a/elements/core/rygel.bst b/elements/core/rygel.bst
index 1b39527e..06201c28 100644
--- a/elements/core/rygel.bst
+++ b/elements/core/rygel.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:rygel/0.38/rygel-0.38.3.tar.xz
+  ref: 08c21a577f7bdad26446a75ffa32778b26842c3b1188165f0b19818559747d00
 depends:
 - core-deps/gssdp.bst
 - core-deps/gupnp-av.bst
diff --git a/elements/core/simple-scan.bst b/elements/core/simple-scan.bst
index a45b0375..cfd4632d 100644
--- a/elements/core/simple-scan.bst
+++ b/elements/core/simple-scan.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:simple-scan/3.34/simple-scan-3.34.2.tar.xz
+  url: gnome_downloads:simple-scan/3.34/simple-scan-3.34.4.tar.xz
+  ref: 7f341beebd49ea0a7477dc5c28459aa96bac04b348d56e69d3d250ffc5317e77
 depends:
 - core-deps/PackageKit.bst
 - core-deps/colord-gtk.bst
diff --git a/elements/core/sushi.bst b/elements/core/sushi.bst
index ab1d7bf8..e94296ed 100644
--- a/elements/core/sushi.bst
+++ b/elements/core/sushi.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:sushi/3.34/sushi-3.34.0.tar.xz
+  ref: a8a2330baaca40f539557b336375c67893afa232690705cbba7bbf55224799fd
 depends:
 - core-deps/gtksourceview.bst
 - core-deps/libmusicbrainz.bst
diff --git a/elements/core/totem.bst b/elements/core/totem.bst
index a28ee729..2baf799a 100644
--- a/elements/core/totem.bst
+++ b/elements/core/totem.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:totem/3.34/totem-3.34.1.tar.xz
+  ref: 6bf89ab096dfc564f260976e484165f09bd886434d184410d2f944bfba611a09
 depends:
 - core-deps/grilo-plugins.bst
 - core-deps/grilo.bst
diff --git a/elements/core/vino.bst b/elements/core/vino.bst
index b5d5caa5..faabbeb3 100644
--- a/elements/core/vino.bst
+++ b/elements/core/vino.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:vino/3.22/vino-3.22.0.tar.xz
+  ref: 2911c779b6a2c46e5bc8e5a0c94c2a4d5bd4a1ee7e35f2818702cb13d9d23bab
 depends:
 - core-deps/NetworkManager.bst
 - filename: core-deps/intltool.bst
diff --git a/elements/freedesktop-sdk.bst b/elements/freedesktop-sdk.bst
index 50147d49..18a0feb3 100644
--- a/elements/freedesktop-sdk.bst
+++ b/elements/freedesktop-sdk.bst
@@ -4,6 +4,7 @@ sources:
   url: https://gitlab.com/freedesktop-sdk/freedesktop-sdk.git
   track: 19.08
   track-tags: true
+  ref: freedesktop-sdk-19.08.7-0-g821ddf32ab8e9c3f4a9514b618b8626615162b9f
 config:
   options:
     target_arch: '%{arch}'
diff --git a/elements/sdk/WebKitGTK.bst b/elements/sdk/WebKitGTK.bst
index 1b647ea5..71af94d3 100644
--- a/elements/sdk/WebKitGTK.bst
+++ b/elements/sdk/WebKitGTK.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: webkitgtk_org:webkitgtk-2.26.3.tar.xz
+  ref: add51153943cc11d90a7038d0ea5f6332281e6c0be0640f802a211b035f0e611
 - kind: patch
   path: files/webkitgtk/gtk-doc-introspection-cross-compiling.patch
 - kind: local
@@ -59,12 +60,9 @@ depends:
 variables:
   webkitgtk_toolchain: ''
   (?):
-    - arch == "i686" or arch == "arm":
-        webkitgtk_toolchain: -DCMAKE_BUILD_TYPE=Release -DCMAKE_TOOLCHAIN_FILE=toolchain.%{arch}
-  cmake-local:
-    -DPORT=GTK
-    -DENABLE_BUBBLEWRAP_SANDBOX=OFF
-    %{webkitgtk_toolchain}
+  - arch == "i686" or arch == "arm":
+      webkitgtk_toolchain: -DCMAKE_BUILD_TYPE=Release -DCMAKE_TOOLCHAIN_FILE=toolchain.%{arch}
+  cmake-local: -DPORT=GTK -DENABLE_BUBBLEWRAP_SANDBOX=OFF %{webkitgtk_toolchain}
 (?):
 - arch == "i686":
     environment:
diff --git a/elements/sdk/adwaita-icon-theme.bst b/elements/sdk/adwaita-icon-theme.bst
index 97c5901c..9a8c1c9f 100644
--- a/elements/sdk/adwaita-icon-theme.bst
+++ b/elements/sdk/adwaita-icon-theme.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:adwaita-icon-theme/3.34/adwaita-icon-theme-3.34.3.tar.xz
+  ref: e7c2d8c259125d5f35ec09522b88c8fe7ecf625224ab0811213ef0a95d90b908
 depends:
 - sdk/gtk+-3.bst
 - sdk/librsvg.bst
diff --git a/elements/sdk/appstream-glib.bst b/elements/sdk/appstream-glib.bst
index aef39ade..72bf59ca 100644
--- a/elements/sdk/appstream-glib.bst
+++ b/elements/sdk/appstream-glib.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: people_freedesktop_org:~hughsient/appstream-glib/releases/appstream-glib-0.7.16.tar.xz
+  ref: 04f290d73bc865071112076b8a3345df2730783a16af976fe3becfd2f50d5992
 depends:
 - sdk/gcab.bst
 - sdk/gdk-pixbuf.bst
diff --git a/elements/sdk/at-spi2-atk.bst b/elements/sdk/at-spi2-atk.bst
index 0e5fe4bc..6f970b0e 100644
--- a/elements/sdk/at-spi2-atk.bst
+++ b/elements/sdk/at-spi2-atk.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:at-spi2-atk/2.34/at-spi2-atk-2.34.1.tar.xz
+  ref: 776df930748fde71c128be6c366a987b98b6ee66d508ed9c8db2355bf4b9cc16
 depends:
 - sdk/at-spi2-core.bst
 - sdk/atk.bst
diff --git a/elements/sdk/at-spi2-core.bst b/elements/sdk/at-spi2-core.bst
index 7620da52..ce86bec1 100644
--- a/elements/sdk/at-spi2-core.bst
+++ b/elements/sdk/at-spi2-core.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:at-spi2-core/2.34/at-spi2-core-2.34.0.tar.xz
+  ref: d629cdbd674e539f8912028512af583990938c7b49e25184c126b00121ef11c6
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/atk.bst b/elements/sdk/atk.bst
index cd46a982..3d801942 100644
--- a/elements/sdk/atk.bst
+++ b/elements/sdk/atk.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:atk/2.34/atk-2.34.1.tar.xz
+  ref: d4f0e3b3d21265fcf2bc371e117da51c42ede1a71f6db1c834e6976bb20997cb
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/brotli.bst b/elements/sdk/brotli.bst
index e57f7ef3..5de99aa1 100644
--- a/elements/sdk/brotli.bst
+++ b/elements/sdk/brotli.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:google/brotli/archive/v1.0.5.tar.gz
+  ref: 3d5bedd48edb909fe3b87cb99f7d139b987ef6f1616b7e22d74e928270a2fd20
 depends:
 - filename: public-stacks/buildsystem-cmake.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/cantarell-fonts.bst b/elements/sdk/cantarell-fonts.bst
index 46fecd01..2d863c88 100644
--- a/elements/sdk/cantarell-fonts.bst
+++ b/elements/sdk/cantarell-fonts.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:cantarell-fonts/0.111/cantarell-fonts-0.111.tar.xz
+  url: gnome_downloads:cantarell-fonts/0.201/cantarell-fonts-0.201.tar.xz
+  ref: b61f64e5f6a48aa0abc7a53cdcbce60de81908ca36048a64730978fcd9ac9863
 depends:
 - filename: sdk/appstream-glib.bst
   type: build
diff --git a/elements/sdk/clutter-gst.bst b/elements/sdk/clutter-gst.bst
index e6cf0dd3..ebc311d5 100644
--- a/elements/sdk/clutter-gst.bst
+++ b/elements/sdk/clutter-gst.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:clutter-gst/3.0/clutter-gst-3.0.27.tar.xz
+  ref: fe69bd6c659d24ab30da3f091eb91cd1970026d431179b0724f13791e8ad9f9d
 depends:
 - sdk/clutter.bst
 - sdk/cogl.bst
diff --git a/elements/sdk/clutter-gtk.bst b/elements/sdk/clutter-gtk.bst
index 1d72f248..5b8b9fdd 100644
--- a/elements/sdk/clutter-gtk.bst
+++ b/elements/sdk/clutter-gtk.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:clutter-gtk/1.8/clutter-gtk-1.8.4.tar.xz
+  ref: 521493ec038973c77edcb8bc5eac23eed41645117894aaee7300b2487cb42b06
 depends:
 - sdk/clutter.bst
 - sdk/gtk+-3.bst
diff --git a/elements/sdk/clutter.bst b/elements/sdk/clutter.bst
index fe387843..afe3142d 100644
--- a/elements/sdk/clutter.bst
+++ b/elements/sdk/clutter.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:clutter/1.26/clutter-1.26.2.tar.xz
+  ref: e7233314983055e9018f94f56882e29e7fc34d8d35de030789fdcd9b2d0e2e56
 depends:
 - sdk/atk.bst
 - sdk/cogl.bst
diff --git a/elements/sdk/cogl.bst b/elements/sdk/cogl.bst
index 32f0da7b..238bcf72 100644
--- a/elements/sdk/cogl.bst
+++ b/elements/sdk/cogl.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:cogl/1.22/cogl-1.22.4.tar.xz
+  ref: 5217bf94cbca3df63268a3b79d017725382b9e592b891d1e7dc6212590ce0de0
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/dconf.bst b/elements/sdk/dconf.bst
index 439583e0..5052a979 100644
--- a/elements/sdk/dconf.bst
+++ b/elements/sdk/dconf.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:dconf/0.34/dconf-0.34.0.tar.xz
+  ref: 943a94ab16121de5580ceaed2605b87444d1bca1c6cd8beefb778bcb0aa2da52
 - kind: patch
   path: files/dconf/dconf-override.patch
 depends:
diff --git a/elements/sdk/enchant-2.bst b/elements/sdk/enchant-2.bst
index c5cc64ae..a70c0a78 100644
--- a/elements/sdk/enchant-2.bst
+++ b/elements/sdk/enchant-2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:AbiWord/enchant/releases/download/v2.2.3/enchant-2.2.3.tar.gz
+  ref: abd8e915675cff54c0d4da5029d95c528362266557c61c7149d53fa069b8076d
 depends:
 - sdk/glib.bst
 - filename: components/hunspell.bst
diff --git a/elements/sdk/gcab.bst b/elements/sdk/gcab.bst
index 533ab99a..92f83eb5 100644
--- a/elements/sdk/gcab.bst
+++ b/elements/sdk/gcab.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gcab/1.4/gcab-1.4.tar.xz
+  ref: 67a5fa9be6c923fbc9197de6332f36f69a33dadc9016a2b207859246711c048f
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/gcr.bst b/elements/sdk/gcr.bst
index 19035c9c..d377b6f4 100644
--- a/elements/sdk/gcr.bst
+++ b/elements/sdk/gcr.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gcr/3.34/gcr-3.34.0.tar.xz
+  ref: 29df50974a90987af694c0fb8926a6b366e68cacd8abd813817cfe1eb5d54524
 depends:
 - sdk/glib.bst
 - sdk/gtk+-3.bst
diff --git a/elements/sdk/gdk-pixbuf.bst b/elements/sdk/gdk-pixbuf.bst
index bf66c3ee..8dd8902c 100644
--- a/elements/sdk/gdk-pixbuf.bst
+++ b/elements/sdk/gdk-pixbuf.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gdk-pixbuf/2.40/gdk-pixbuf-2.40.0.tar.xz
+  ref: 1582595099537ca8ff3b99c6804350b4c058bb8ad67411bbaae024ee7cead4e6
 depends:
 - sdk/glib.bst
 - filename: sdk/gobject-introspection.bst
diff --git a/elements/sdk/geoclue.bst b/elements/sdk/geoclue.bst
index 3520e251..ba5c059e 100644
--- a/elements/sdk/geoclue.bst
+++ b/elements/sdk/geoclue.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: https://gitlab.freedesktop.org/geoclue/geoclue/-/archive/2.5.1/geoclue-2.5.1.tar.gz
+  ref: f552ba69ce32519f78858c48215680e364b9b01197550df9327c5a01e44a9913
 depends:
 - sdk/glib.bst
 - filename: sdk/gtk-doc.bst
diff --git a/elements/sdk/gjs.bst b/elements/sdk/gjs.bst
index b3f067d9..67549df1 100644
--- a/elements/sdk/gjs.bst
+++ b/elements/sdk/gjs.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gjs/1.58/gjs-1.58.4.tar.xz
+  ref: 261a3f666c771d7744965fe71b804fc2c3a3d46a8e3e8d4f7ed5ef97967ebd5f
 depends:
 - sdk/gobject-introspection.bst
 - sdk/gtk+-3.bst
diff --git a/elements/sdk/glib-networking.bst b/elements/sdk/glib-networking.bst
index f03e606b..b0926ae2 100644
--- a/elements/sdk/glib-networking.bst
+++ b/elements/sdk/glib-networking.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:glib-networking/2.62/glib-networking-2.62.3.tar.xz
+  ref: 8ca1f86f23a76b5c7640624f7d5490705c78e81375e1741c9a1c41ce7f8f7ff7
 depends:
 - sdk/glib.bst
 - sdk/gsettings-desktop-schemas.bst
diff --git a/elements/sdk/glib.bst b/elements/sdk/glib.bst
index 784b2633..73fc4884 100644
--- a/elements/sdk/glib.bst
+++ b/elements/sdk/glib.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:glib/2.62/glib-2.62.4.tar.xz
+  ref: 4c84030d77fa9712135dfa8036ad663925655ae95b1d19399b6200e869925bbc
 depends:
 - filename: sdk/gtk-doc.bst
   type: build
diff --git a/elements/sdk/gobject-introspection.bst b/elements/sdk/gobject-introspection.bst
index 57593360..d0cdcfeb 100644
--- a/elements/sdk/gobject-introspection.bst
+++ b/elements/sdk/gobject-introspection.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gobject-introspection/1.62/gobject-introspection-1.62.0.tar.xz
+  ref: b1ee7ed257fdbc008702bdff0ff3e78a660e7e602efa8f211dc89b9d1e7d90a2
 depends:
 - sdk/glib.bst
 - filename: sdk/gtk-doc.bst
diff --git a/elements/sdk/gsettings-desktop-schemas.bst b/elements/sdk/gsettings-desktop-schemas.bst
index 3cc504d7..8f31957b 100644
--- a/elements/sdk/gsettings-desktop-schemas.bst
+++ b/elements/sdk/gsettings-desktop-schemas.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gsettings-desktop-schemas/3.34/gsettings-desktop-schemas-3.34.0.tar.xz
+  ref: 288b04260f7040b0e004a8d59c773cfb4e32df4f1b4a0f9d705c51afccc95ead
 - kind: patch
   path: files/gsettings-desktop-schemas/0001-Revert-schemas-change-default-monospaced-and-documen.patch
 depends:
diff --git a/elements/sdk/gtk+-3.bst b/elements/sdk/gtk+-3.bst
index 86848448..69008b83 100644
--- a/elements/sdk/gtk+-3.bst
+++ b/elements/sdk/gtk+-3.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: gnome_downloads:gtk+/3.24/gtk+-3.24.13.tar.xz
+  url: gnome_downloads:gtk+/3.24/gtk+-3.24.14.tar.xz
+  ref: 1c4d69f93ab884fd80c6b95115bfbc12d51ecd029178b6dad3672fdc5ff91e88
 depends:
 - sdk/at-spi2-atk.bst
 - sdk/atk.bst
diff --git a/elements/sdk/gtk-doc.bst b/elements/sdk/gtk-doc.bst
index 04a75b8c..ff3df281 100644
--- a/elements/sdk/gtk-doc.bst
+++ b/elements/sdk/gtk-doc.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:gtk-doc/1.32/gtk-doc-1.32.tar.xz
+  ref: de0ef034fb17cb21ab0c635ec730d19746bce52984a6706e7bbec6fb5e0b907c
 depends:
 - filename: sdk/python-pygments.bst
   type: runtime
diff --git a/elements/sdk/gtk.bst b/elements/sdk/gtk.bst
index 0cb0aeec..f1d4cc5c 100644
--- a/elements/sdk/gtk.bst
+++ b/elements/sdk/gtk.bst
@@ -1,7 +1,7 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:gtk/3.96/gtk-3.96.0.tar.xz
+  url: gnome_downloads:gtk/3.98/gtk-3.98.0.tar.xz
 depends:
 - sdk/at-spi2-atk.bst
 - sdk/atk.bst
diff --git a/elements/sdk/gvfs.bst b/elements/sdk/gvfs.bst
index 034188d8..0bc22e80 100644
--- a/elements/sdk/gvfs.bst
+++ b/elements/sdk/gvfs.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:gvfs/1.42/gvfs-1.42.2.tar.xz
+  ref: b57af97573bd295aa50037eed29c6ba7a36188230c515e007c3018855a5cf949
 depends:
 - sdk/glib.bst
 - sdk/gsettings-desktop-schemas.bst
diff --git a/elements/sdk/ibus.bst b/elements/sdk/ibus.bst
index afa84afe..cbdd1111 100644
--- a/elements/sdk/ibus.bst
+++ b/elements/sdk/ibus.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: github_com:ibus/ibus/releases/download/1.5.20/ibus-1.5.20.tar.gz
+  ref: 4cf1e5ca4b067a3bed3cdfa658d49ac597d817b2de627a1095214565f862d034
 depends:
 - sdk/dconf.bst
 - sdk/glib.bst
diff --git a/elements/sdk/json-glib.bst b/elements/sdk/json-glib.bst
index ef05b5d5..065768e3 100644
--- a/elements/sdk/json-glib.bst
+++ b/elements/sdk/json-glib.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:json-glib/1.4/json-glib-1.4.4.tar.xz
+  ref: 720c5f4379513dc11fd97dc75336eb0c0d3338c53128044d9fabec4374f4bc47
 depends:
 - sdk/glib.bst
 - filename: sdk/gobject-introspection.bst
diff --git a/elements/sdk/krb5.bst b/elements/sdk/krb5.bst
index c1e1c276..dc307943 100644
--- a/elements/sdk/krb5.bst
+++ b/elements/sdk/krb5.bst
@@ -54,6 +54,7 @@ config:
 sources:
 - kind: tar
   url: https://kerberos.org/dist/krb5/1.16/krb5-1.16.2.tar.gz
+  ref: 9f721e1fe593c219174740c71de514c7228a97d23eb7be7597b2ae14e487f027
 - kind: local
   path: files/krb5
   directory: krb5-config
diff --git a/elements/sdk/libcanberra.bst b/elements/sdk/libcanberra.bst
index 108e0302..4924d5d4 100644
--- a/elements/sdk/libcanberra.bst
+++ b/elements/sdk/libcanberra.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: tarballs_needing_help:libcanberra-0.30.tar.xz
+  ref: c2b671e67e0c288a69fc33dc1b6f1b534d07882c2aceed37004bf48c601afa72
 depends:
 - sdk/gtk+-3.bst
 - filename: components/libpulse.bst
diff --git a/elements/sdk/libcroco.bst b/elements/sdk/libcroco.bst
index 327fe4a4..57a4d2e5 100644
--- a/elements/sdk/libcroco.bst
+++ b/elements/sdk/libcroco.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:libcroco/0.6/libcroco-0.6.13.tar.xz
+  ref: 767ec234ae7aa684695b3a735548224888132e063f92db585759b422570621d4
 depends:
 - sdk/glib.bst
 - filename: sdk/gtk-doc.bst
diff --git a/elements/sdk/libgee.bst b/elements/sdk/libgee.bst
index 9220b048..2c659277 100644
--- a/elements/sdk/libgee.bst
+++ b/elements/sdk/libgee.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: gnome_downloads:libgee/0.20/libgee-0.20.2.tar.xz
+  url: gnome_downloads:libgee/0.20/libgee-0.20.3.tar.xz
+  ref: d0b5edefc88cbca5f1709d19fa62aef490922c6577a14ac4e7b085507911a5de
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/libnotify.bst b/elements/sdk/libnotify.bst
index e7b5c1a4..f046a47d 100644
--- a/elements/sdk/libnotify.bst
+++ b/elements/sdk/libnotify.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:libnotify/0.7/libnotify-0.7.8.tar.xz
+  ref: 69209e0b663776a00c7b6c0e560302a8dbf66b2551d55616304f240bba66e18c
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/librsvg.bst b/elements/sdk/librsvg.bst
index 7ec88326..7045bc59 100644
--- a/elements/sdk/librsvg.bst
+++ b/elements/sdk/librsvg.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:librsvg/2.46/librsvg-2.46.4.tar.xz
+  ref: b45b9ee3b64c58baaf800bcdff5fcd04d79930dba4c56e46e0d3b0aead40cc29
 depends:
 - sdk/gdk-pixbuf.bst
 - sdk/glib.bst
diff --git a/elements/sdk/libsecret.bst b/elements/sdk/libsecret.bst
index ec08a4e6..9dc5806c 100644
--- a/elements/sdk/libsecret.bst
+++ b/elements/sdk/libsecret.bst
@@ -1,7 +1,8 @@
 kind: meson
 sources:
 - kind: tar
-  url: gnome_downloads:libsecret/0.19/libsecret-0.19.1.tar.xz
+  url: gnome_downloads:libsecret/0.20/libsecret-0.20.1.tar.xz
+  ref: 57f73e94ec6263a17a077fb809cf8cf424637a897a7f15b4eec42ce4aef52447
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/libsoup.bst b/elements/sdk/libsoup.bst
index 4f3f4225..4f7d320b 100644
--- a/elements/sdk/libsoup.bst
+++ b/elements/sdk/libsoup.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:libsoup/2.68/libsoup-2.68.3.tar.xz
+  ref: 534bb08e35b0ff3702f3adfde87d3441e27c12f9f5ec351f056fe04cba02bafb
 depends:
 - sdk/brotli.bst
 - sdk/glib.bst
diff --git a/elements/sdk/libwpe.bst b/elements/sdk/libwpe.bst
index 3d823fa0..1024b57d 100644
--- a/elements/sdk/libwpe.bst
+++ b/elements/sdk/libwpe.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:WebPlatformForEmbedded/libwpe/releases/download/1.4.0.1/libwpe-1.4.0.1.tar.xz
+  ref: 09849dfb34877354f34f318e138971cf22e677b2179e1f0a8ea00ab0b7bd8e9b
 depends:
 - filename: bootstrap-import.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/mozjs60.bst b/elements/sdk/mozjs60.bst
index 71020a1d..b849cb50 100644
--- a/elements/sdk/mozjs60.bst
+++ b/elements/sdk/mozjs60.bst
@@ -2,6 +2,7 @@ kind: manual
 sources:
 - kind: tar
   url: gnome_download:teams/releng/tarballs-needing-help/mozjs/mozjs-60.8.0.tar.bz2
+  ref: 697331336c3d65b80ded9ca87b4a8ceb804e5342b476eaa133ac638102a9dc5d
 depends:
 - filename: sdk/python2.bst
   type: build
@@ -16,14 +17,15 @@ depends:
 variables:
   mozjs_target: ''
   (?):
-    - arch == "i686":
-        mozjs_target: "--host=i686-unknown-linux-gnu"
-    - arch == "arm":
-        mozjs_target: "--host=arm-unknown-linux-gnueabi"
+  - arch == "i686":
+      mozjs_target: "--host=i686-unknown-linux-gnu"
+  - arch == "arm":
+      mozjs_target: "--host=arm-unknown-linux-gnueabi"
   command-subdir: _build
 config:
   configure-commands:
-  -  ../js/src/configure --prefix=%{prefix} --libdir=%{libdir} --disable-jemalloc AUTOCONF=autoconf 
%{mozjs_target}
+  - ../js/src/configure --prefix=%{prefix} --libdir=%{libdir} --disable-jemalloc AUTOCONF=autoconf
+    %{mozjs_target}
   build-commands:
   - make
   install-commands:
diff --git a/elements/sdk/openjpeg.bst b/elements/sdk/openjpeg.bst
index 21e2ee3e..c75ba9e5 100644
--- a/elements/sdk/openjpeg.bst
+++ b/elements/sdk/openjpeg.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:uclouvain/openjpeg/archive/v2.3.1.tar.gz
+  ref: 63f5a4713ecafc86de51bfad89cc07bb788e9bba24ebbf0c4ca637621aadb6a9
 depends:
 - filename: public-stacks/buildsystem-cmake.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/pango.bst b/elements/sdk/pango.bst
index 30990996..402f97f8 100644
--- a/elements/sdk/pango.bst
+++ b/elements/sdk/pango.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:pango/1.44/pango-1.44.7.tar.xz
+  ref: 66a5b6cc13db73efed67b8e933584509f8ddb7b10a8a40c3850ca4a985ea1b1f
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/pycairo.bst b/elements/sdk/pycairo.bst
index 0e207c6c..303209f8 100644
--- a/elements/sdk/pycairo.bst
+++ b/elements/sdk/pycairo.bst
@@ -2,6 +2,7 @@ kind: distutils
 sources:
 - kind: tar
   url: github_com:pygobject/pycairo/releases/download/v1.18.0/pycairo-1.18.0.tar.gz
+  ref: abd42a4c9c2069febb4c38fe74bfc4b4a9d3a89fea3bc2e4ba7baff7a20f783f
 depends:
 - filename: components/cairo.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/pygobject.bst b/elements/sdk/pygobject.bst
index 4051d9d8..2445d0c1 100644
--- a/elements/sdk/pygobject.bst
+++ b/elements/sdk/pygobject.bst
@@ -2,6 +2,7 @@ kind: distutils
 sources:
 - kind: tar
   url: gnome_downloads:pygobject/3.34/pygobject-3.34.0.tar.xz
+  ref: 87e2c9aa785f352ef111dcc5f63df9b85cf6e05e52ff04f803ffbebdacf5271a
 depends:
 - sdk/glib.bst
 - sdk/gobject-introspection.bst
diff --git a/elements/sdk/python-pygments.bst b/elements/sdk/python-pygments.bst
index eeda8595..6049eafa 100644
--- a/elements/sdk/python-pygments.bst
+++ b/elements/sdk/python-pygments.bst
@@ -2,6 +2,7 @@ kind: distutils
 sources:
 - kind: tar
   url: 
https://files.pythonhosted.org/packages/64/69/413708eaf3a64a6abb8972644e0f20891a55e621c6759e2c3f3891e05d63/Pygments-2.3.1.tar.gz
+  ref: 5ffada19f6203563680669ee7f53b64dabbeb100eb51b61996085e99c03b284a
 depends:
 - filename: components/python3.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/python2.bst b/elements/sdk/python2.bst
index d6b7777a..afe10228 100644
--- a/elements/sdk/python2.bst
+++ b/elements/sdk/python2.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: https://www.python.org/ftp/python/2.7.16/Python-2.7.16.tar.xz
+  ref: f222ef602647eecb6853681156d32de4450a2c39f4de93bd5b20235f2e660ed7
 depends:
 - filename: components/expat.bst
   junction: freedesktop-sdk.bst
@@ -29,5 +30,5 @@ variables:
     --enable-unicode=ucs4
 config:
   install-commands:
-    - '%{make-install} DESTSHARED=/usr/lib/python2.7/lib-dynload'
-    - rm %{install-root}%{bindir}/2to3
+  - '%{make-install} DESTSHARED=/usr/lib/python2.7/lib-dynload'
+  - rm %{install-root}%{bindir}/2to3
diff --git a/elements/sdk/vala-tarball.bst b/elements/sdk/vala-tarball.bst
index 229b68d6..605d2124 100644
--- a/elements/sdk/vala-tarball.bst
+++ b/elements/sdk/vala-tarball.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:vala/0.36/vala-0.36.20.tar.xz
+  ref: be960a87841d85ff76cbd0e10eb691675190e54bd690d76982b3fb94a1fc67a7
 depends:
 - sdk/glib.bst
 - filename: components/bison.bst
diff --git a/elements/sdk/vala.bst b/elements/sdk/vala.bst
index 529e8347..ed55df69 100644
--- a/elements/sdk/vala.bst
+++ b/elements/sdk/vala.bst
@@ -1,7 +1,8 @@
 kind: autotools
 sources:
 - kind: tar
-  url: gnome_downloads:vala/0.46/vala-0.46.5.tar.xz
+  url: gnome_downloads:vala/0.46/vala-0.46.6.tar.xz
+  ref: ef31649932872f094971d46453b21c60a41661670f98afa334062425b4aec47a
 depends:
 - sdk/glib.bst
 - filename: sdk/vala-tarball.bst
diff --git a/elements/sdk/vte.bst b/elements/sdk/vte.bst
index 9b73aeac..253354a5 100644
--- a/elements/sdk/vte.bst
+++ b/elements/sdk/vte.bst
@@ -2,6 +2,7 @@ kind: meson
 sources:
 - kind: tar
   url: gnome_downloads:vte/0.58/vte-0.58.3.tar.xz
+  ref: 22dcb54ac2ad1a56ab0a745e16ccfeb383f0b5860b5bfa1784561216f98d4975
 depends:
 - sdk/glib.bst
 - sdk/gtk+-3.bst
diff --git a/elements/sdk/woff2.bst b/elements/sdk/woff2.bst
index 210dbaf1..c2738821 100644
--- a/elements/sdk/woff2.bst
+++ b/elements/sdk/woff2.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:google/woff2/archive/v1.0.2.tar.gz
+  ref: add272bb09e6384a4833ffca4896350fdb16e0ca22df68c0384773c67a175594
 depends:
 - sdk/brotli.bst
 - filename: public-stacks/buildsystem-cmake.bst
diff --git a/elements/sdk/wpebackend-fdo.bst b/elements/sdk/wpebackend-fdo.bst
index 858d8f82..25208f40 100644
--- a/elements/sdk/wpebackend-fdo.bst
+++ b/elements/sdk/wpebackend-fdo.bst
@@ -2,6 +2,7 @@ kind: cmake
 sources:
 - kind: tar
   url: github_com:Igalia/WPEBackend-fdo/releases/download/1.4.0/wpebackend-fdo-1.4.0.tar.xz
+  ref: a919ca4a5bc445f9419a5b7f3781cfc98e5abcf5d7259eb1869f5ab20fd18baf
 depends:
 - filename: bootstrap-import.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/yelp-tools.bst b/elements/sdk/yelp-tools.bst
index 808a42e8..83b812e8 100644
--- a/elements/sdk/yelp-tools.bst
+++ b/elements/sdk/yelp-tools.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:yelp-tools/3.32/yelp-tools-3.32.2.tar.xz
+  ref: 183856b5ed0b0bb2c05dd1204af023946ed436943e35e789afb0295e5e71e8f9
 depends:
 - sdk/yelp-xsl.bst
 - filename: public-stacks/buildsystem-autotools.bst
diff --git a/elements/sdk/yelp-xsl.bst b/elements/sdk/yelp-xsl.bst
index 4ec2f80a..880603df 100644
--- a/elements/sdk/yelp-xsl.bst
+++ b/elements/sdk/yelp-xsl.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:yelp-xsl/3.34/yelp-xsl-3.34.2.tar.xz
+  ref: 0c3fe6146113df26fb1295901b1c7baed9f0fe67a87f4345e11543aefe7cb7ad
 depends:
 - filename: components/itstools.bst
   junction: freedesktop-sdk.bst
diff --git a/elements/sdk/yelp.bst b/elements/sdk/yelp.bst
index 1be60ed1..aff4f785 100644
--- a/elements/sdk/yelp.bst
+++ b/elements/sdk/yelp.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:yelp/3.34/yelp-3.34.0.tar.xz
+  ref: e3d6527c5963d73206891b32f1f23363164be57de248555513bd0be77a7bd045
 depends:
 - sdk/WebKitGTK.bst
 - sdk/adwaita-icon-theme.bst
diff --git a/elements/sdk/zenity.bst b/elements/sdk/zenity.bst
index 55238408..dbec87ee 100644
--- a/elements/sdk/zenity.bst
+++ b/elements/sdk/zenity.bst
@@ -2,6 +2,7 @@ kind: autotools
 sources:
 - kind: tar
   url: gnome_downloads:zenity/3.32/zenity-3.32.0.tar.xz
+  ref: e786e733569c97372c3ef1776e71be7e7599ebe87e11e8ad67dcc2e63a82cd95
 depends:
 - sdk/gtk+-3.bst
 - sdk/yelp-tools.bst
diff --git a/project.conf b/project.conf
index 14d1bee1..712e0e9c 100644
--- a/project.conf
+++ b/project.conf
@@ -8,7 +8,7 @@ format-version: 14
 element-path: elements
 
 # Store source refs in central project.refs file
-ref-storage: project.refs
+ref-storage: inline
 
 # The uri to download built artifacts from for this project
 artifacts:
@@ -231,12 +231,9 @@ variables:
   localstatedir: "/var"
   indep-libdir: "%{prefix}/lib"
   debugdir: "%{indep-libdir}/debug"
-  common_flags: "-O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions\
-    \ -fstack-protector-strong -grecord-gcc-switches"
-  flags_x86_64: "-march=x86-64 -mtune=generic %{common_flags} -fasynchronous-unwind-tables\
-    \ -fstack-clash-protection -fcf-protection"
-  flags_i686: "-march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign %{common_flags}\
-    \ -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection"
+  common_flags: "-O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions 
-fstack-protector-strong -grecord-gcc-switches"
+  flags_x86_64: "-march=x86-64 -mtune=generic %{common_flags} -fasynchronous-unwind-tables 
-fstack-clash-protection -fcf-protection"
+  flags_i686: "-march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign %{common_flags} 
-fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection"
   flags_aarch64: "%{common_flags} -fasynchronous-unwind-tables -fstack-clash-protection"
   flags_arm: "%{common_flags}"
   ldflags_defaults: "-Wl,-z,relro,-z,now -Wl,--as-needed -L%{libdir}"
[Date Prev][Date Next] [Thread Prev][Thread Next] [Thread Index] [Date Index] [Author Index]