They now check in multiple places for the signature, so replace all occurences.
To prevent this happening in the future also pin the release.