7da0e025da
Read the .sha256 sidecar attachment (generated by GenerateReleaseChecksums) and populate the <sha256> element in the update XML. This matches the pattern used by Akeeba (sha512) and JCE (sha256 + sha384 + sha512) for integrity verification. Also fix zip attachment filter to skip .sha256 sidecar files when selecting the download URL. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>