fix: generate profiles.json.sha256 in build, simplify sha256 URL for nightly compat

fix #1

- build.sh: generate config/profiles.json.sha256 after merge (committed to repo)
- quickstart.sh/ps1: use ${config_url}.sha256 for all config URLs (works for default, custom, nightly)
- nightly.yml: commit config/profiles.json + .sha256, remove separate sha256 step
- release.yml: include config/profiles.json.sha256 in release assets
- release.sh: remove separate sha256 generation, use config/profiles.json.sha256

Author: MomoLawson

.github/workflows/nightly.yml

@@ -82,18 +82,14 @@ jobs:
         if: steps.check.outputs.exists == 'false'
         run: bash scripts/build.sh
 
-      - name: Generate SHA256 checksum
-        if: steps.check.outputs.exists == 'false'
-        run: shasum -a 256 config/profiles.json | awk '{print $1}' > dist/profiles.json.sha256
-
       - name: Commit dist
         if: steps.check.outputs.exists == 'false'
         run: |
           VERSION="${{ steps.check.outputs.version }}"
           DATE="${{ steps.check.outputs.date_display }}"
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add dist/
+          git add dist/ config/profiles.json config/profiles.json.sha256
           git commit -m "nightly: Nightly @ ${DATE} (v${VERSION})" || echo "No changes to commit"
 
       - name: Tag and push
@@ -132,4 +128,4 @@ jobs:
           files: |
             dist/quickstart.sh
             dist/quickstart.ps1
-            dist/profiles.json.sha256
+            config/profiles.json.sha256

.github/workflows/release.yml

@@ -77,3 +77,4 @@ jobs:
           files: |
             dist/quickstart.sh
             dist/quickstart.ps1
+            config/profiles.json.sha256

config/profiles.json.sha256

@@ -0,0 +1 @@
+f11eb0443b3bc103e2a649f14686578e796352bb36817555bb10e0b7d1f79ae7

dist/quickstart.ps1

@@ -1027,11 +1027,7 @@ function Show-Banner {
 # ============================================
 function Test-ConfigChecksum {
 param([string]$Path, [string]$Url)
-    if ($Url -eq $DEFAULT_CFG_URL) {
-        $sha256Url = "https://github.com/MomoLawson/Quickstart-PC/releases/download/v${VERSION}/profiles.json.sha256"
-    } else {
-        $sha256Url = "${Url}.sha256"
-    }
+    $sha256Url = "${Url}.sha256"
     try {
         $expectedHash = (Invoke-WebRequestWithProxy -Uri $sha256Url -TimeoutSec 30 -ErrorAction Stop).Content.Trim()
         $actualHash = (Get-FileHash -Path $Path -Algorithm SHA256).Hash.ToLower()

dist/quickstart.sh

@@ -1626,13 +1626,7 @@ get_linux_field() {
 verify_config_checksum() {
     local config_file="$1"
     local config_url="$2"
-    local sha256_url
-    
-    if [[ "$config_url" == "$DEFAULT_CFG_URL" ]]; then
-        sha256_url="https://github.com/MomoLawson/Quickstart-PC/releases/download/v${VERSION}/profiles.json.sha256"
-    else
-        sha256_url="${config_url}.sha256"
-    fi
+    local sha256_url="${config_url}.sha256"
 
     local expected_hash
     local actual_hash

scripts/build.sh

@@ -74,6 +74,12 @@ if [[ -f "$SRC_FILE" ]]; then
     echo "    Size: $(wc -c < "$DIST_FILE") bytes"
 fi
 
+# Generate SHA256 checksum for profiles.json (committed to repo, used by scripts at runtime)
+if [[ -f "$CONFIG_DIR/profiles.json" ]]; then
+    shasum -a 256 "$CONFIG_DIR/profiles.json" | awk '{print $1}' > "$CONFIG_DIR/profiles.json.sha256"
+    echo "[✓] SHA256: $CONFIG_DIR/profiles.json.sha256"
+fi
+
 # Copy language files to dist/lang/
 LANG_SRC="$SRC_DIR/lang"
 LANG_DIST="$DIST_DIR/lang"

scripts/release.sh

@@ -127,23 +127,13 @@ main() {
         notes=$(cat "$PROJECT_DIR/changelog.md")
     fi
 
-    # Generate SHA256 checksum for profiles.json
-    echo "[→] Generating SHA256 checksum for profiles.json..."
-    local profiles_json="$PROJECT_DIR/config/profiles.json"
-    if [[ -f "$profiles_json" ]]; then
-        shasum -a 256 "$profiles_json" | awk '{print $1}' > "$PROJECT_DIR/dist/profiles.json.sha256"
-        echo "[✓] SHA256 checksum generated"
-    else
-        echo "[!] profiles.json not found, skipping checksum"
-    fi
-    
     gh release create "v$new_version" \
         --title "v$new_version" \
         --notes "$notes" \
         --prerelease \
         "$PROJECT_DIR/dist/quickstart.sh" \
         "$PROJECT_DIR/dist/quickstart.ps1" \
-        "$PROJECT_DIR/dist/profiles.json.sha256"
+        "$PROJECT_DIR/config/profiles.json.sha256"
     echo "[✓] GitHub release created: v$new_version (pre-release)"
 
     # Clear changelog after release

src/quickstart.ps1

@@ -1027,11 +1027,7 @@ function Show-Banner {
 # ============================================
 function Test-ConfigChecksum {
 param([string]$Path, [string]$Url)
-    if ($Url -eq $DEFAULT_CFG_URL) {
-        $sha256Url = "https://github.com/MomoLawson/Quickstart-PC/releases/download/v${VERSION}/profiles.json.sha256"
-    } else {
-        $sha256Url = "${Url}.sha256"
-    }
+    $sha256Url = "${Url}.sha256"
     try {
         $expectedHash = (Invoke-WebRequestWithProxy -Uri $sha256Url -TimeoutSec 30 -ErrorAction Stop).Content.Trim()
         $actualHash = (Get-FileHash -Path $Path -Algorithm SHA256).Hash.ToLower()

src/quickstart.sh

@@ -1626,13 +1626,7 @@ get_linux_field() {
 verify_config_checksum() {
     local config_file="$1"
     local config_url="$2"
-    local sha256_url
-    
-    if [[ "$config_url" == "$DEFAULT_CFG_URL" ]]; then
-        sha256_url="https://github.com/MomoLawson/Quickstart-PC/releases/download/v${VERSION}/profiles.json.sha256"
-    else
-        sha256_url="${config_url}.sha256"
-    fi
+    local sha256_url="${config_url}.sha256"
 
     local expected_hash
     local actual_hash