diff --git a/archlinux/PKGBUILD.in b/archlinux/PKGBUILD.in
index bee19e7..3b7b006 100644
--- a/archlinux/PKGBUILD.in
+++ b/archlinux/PKGBUILD.in
@@ -1,21 +1,21 @@
 # Note: This PKGBUILD is automatically generated by the scripts at https://cgit.kde.org/kdesdk-devenv-dependencies.git/
 # Don't manually edit the PKGBUILD, edit the upstream template instead
 
 pkgname=kde-development-environment-meta
 pkgver=@PKGVER@
 pkgrel=1
 pkgdesc='Metapackage to install a full KDE development environment'
 arch=(any)
 url='https://phabricator.kde.org/T3722'
 license=(LGPL)
 depends=(@DEPENDS@)
 optdepends=(@OPTDEPENDS@)
 makedepends=()
-source=(org.kde.development.appdata.xml)
-md5sums=('@MD5@')
+source=(org.kde.development.appdata.xml kdesdk-devenv-dependencies.svg)
+sha256sums=(@SHA256@)
 noextract=()
 
 package() {
     install -Dm644 org.kde.development.appdata.xml "$pkgdir"/usr/share/metainfo/
     install -Dm644 kdesdk-devenv-dependencies.svg "$pkgdir"/usr/share/icons/hicolor/scalable/apps/
 }
diff --git a/archlinux/genpkgbuild.py b/archlinux/genpkgbuild.py
index c372f05..4914ab1 100755
--- a/archlinux/genpkgbuild.py
+++ b/archlinux/genpkgbuild.py
@@ -1,34 +1,34 @@
 #!/usr/bin/env python3
 
 import sys
 import json
 import hashlib
 import subprocess
 import datetime
 
-def md5(fname):
-    hash_md5 = hashlib.md5()
+def sha256(fname):
+    hash_sha256 = hashlib.sha256()
     with open(fname, "rb") as f:
         for chunk in iter(lambda: f.read(4096), b""):
-            hash_md5.update(chunk)
-    return hash_md5.hexdigest()
+            hash_sha256.update(chunk)
+    return hash_sha256.hexdigest()
 
 def main():
     jsoninfo = subprocess.check_output(["./packages", "packages-json", "archlinux"])
     deps = json.loads(jsoninfo.decode('utf-8'))
 
     with open('archlinux/PKGBUILD.in') as infile, open('archlinux-output/PKGBUILD', 'w') as outfile:
         replacements = {
             "@DEPENDS@": "\n         ".join(deps["required"]),
             "@OPTDEPENDS@": "\n            ".join(deps["suggested"]),
-            "@MD5@": md5("org.kde.development.appdata.xml"),
+            "@SHA256@": "\n            ".join([sha256("org.kde.development.appdata.xml"),sha256("kdesdk-devenv-dependencies.svg")]),
             "@PKGVER@": datetime.datetime.now().strftime('%Y%m%d')
         }
 
         for line in infile:
             for src, target in replacements.items():
                 line = line.replace(src, target)
             outfile.write(line)
 
 if __name__ == "__main__":
     sys.exit(main())