Skip to content

fix: publish a sha256 checksum file for every release asset - #336

Open
MaximeGaudin wants to merge 1 commit into
mainfrom
fix/issue-201-checksum-assets
Open

fix: publish a sha256 checksum file for every release asset#336
MaximeGaudin wants to merge 1 commit into
mainfrom
fix/issue-201-checksum-assets

Conversation

@MaximeGaudin

Copy link
Copy Markdown
Owner

Summary

  • Release archives were published with no way to verify their integrity after download.
  • Each build leg now writes <artifact>.sha256 next to its archive (standard hash␠␠filename format: sha256sum on Unix, Get-FileHash on Windows). The existing upload glob ${{ matrix.artifact }}.* already picks the .sha256 files up, so they land in the artifacts and are uploaded by the release job as downloadable assets (e.g. slint-darwin-arm64.tar.gz.sha256).

Fixes #201

Test plan

  • Workflow file parses as valid YAML; checksum steps verified by format inspection (release workflow is workflow_dispatch-only, so its steps are not exercised by this PR's CI).
  • CI green on the PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

release: no checksums published as downloadable release assets

1 participant