diff --git a/.gitignore b/.gitignore
index e69de29..3aabbf0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1,2 @@
+/qpid-proton-0.40.0.tar.gz
+/licenses.xml
diff --git a/licenses.xml b/licenses.xml
deleted file mode 100644
index 5a701c5..0000000
--- a/licenses.xml
+++ /dev/null
@@ -1,15 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?>
-<licenseSummary>
-  <dependencies>
-    <dependency>
-      <packageName>qpid-proton</packageName>
-      <version>0.38.0</version>
-      <licenses>
-        <license>
-          <name>ASL 2.0</name>
-          <url>http://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-    </dependency>
-  </dependencies>
-</licenseSummary>
diff --git a/sources b/sources
index e64d887..551dfcf 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
-SHA512 (qpid-proton-0.38.0.tar.gz) = 5333046c954d8b63c59579b05173fa2345e0a61f37a305d23b9e3afee461280c82f9f1c19c30954ba32176ce5fef9ce1f0afc57c99d6c614b2d66cdbb71ff00e
+SHA512 (qpid-proton-0.40.0.tar.gz) = ce24a92d623c9e56666128e243bc58acdbff8f7dfac1f728fdbd97a2c3ec21135b8c2a79c3e13920ca0d52545819766b90fc6aca35318b754eedf5ae5329ff36
+SHA512 (licenses.xml) = 0913244de2e851c46d1fe15d3f65e180149f9f56e1bb7b27b88aa89b3af37c94af88cf39545e61092d93fa28838fb99aa8b65d9ab1b4097dad075f636d4a01b8