diff --git a/do.sh b/do.sh
index ae57022..9af7fe6 100755
--- a/do.sh
+++ b/do.sh
@@ -3,9 +3,10 @@
 set -eu
 
 ver=$(sed -rn "H;1h;\$!d;x;s/^.*project\([^)]*kafkacat[^)]*version:[ \t]*'([^']+)'.*$/\1/p" meson.build)
-wget https://github.com/edenhill/kafkacat/archive/$ver.tar.gz -Osrc.tgz
-tar --strip-components=1 -xvf src.tgz
-rm src.tgz
+wget https://github.com/edenhill/kafkacat/archive/$ver.tar.gz -Osrc-$ver.tgz
+sha256sum --ignore-missing -c <sha256
+tar --strip-components=1 -xvf src-$ver.tgz
+rm src-$ver.tgz
 
 CC=musl-gcc meson build --wrap-mode forcefallback \
 	-Ddefault_library=static \
diff --git a/meson.build b/meson.build
index 346c71a..6964832 100644
--- a/meson.build
+++ b/meson.build
@@ -1,4 +1,4 @@
-project('kafkacat', 'c', version: '1.4.0', subproject_dir: 'meson')
+project('kafkacat', 'c', version: '1.5.0', subproject_dir: 'meson')
 
 static = get_option('static')
 yajl = dependency('yajl', version: '>=2', required: get_option('json'), static: static, fallback: ['yajl', 'yajl_dep'])
diff --git a/sha256 b/sha256
new file mode 100644
index 0000000..4565d93
--- /dev/null
+++ b/sha256
@@ -0,0 +1,2 @@
+4c043cb86824a8f650d7dbe3aceaec8aa3fadafbd456d7e7444f18f184fe2347  src-1.4.0.tgz
+16f358fab258cbefc328cf642f72ee8b5dae1648657d508997279ca5bd0fbef0  src-1.5.0.tgz