It looks like no matter what is in this file, the update isn't able to modify the url/sha and overwrite. Meaning that it will always compare against what is checked in. Is this a known issue?
This makes it so the update never works, unless I manually commit changes to reflect the new version, then it works as expected.