Source release sha contains absolute file path

The sha file for source releases contain the absolute path to the file, causing failures during verification on other machines since the path cannot be found.