3 people 87e4b42ed8 fix: third-party GitHub mirrors only serve downloads with a trusted digest (#1057) ...

fix: a third-party GitHub mirror can only serve downloads that carry a trusted digest

Downloads without an expected SHA-256 were still sent through gh-proxy,
ghfast and other mirrors, and the first answer was accepted, so a mirror
could swap an AppImage or a Windows component. Downloader.downloadFile
now tries only the original URL when there is no digest. UserApps passes
GitHub's own asset digest, and WinComponents passes the snapshot's
archive digest, so those large files keep their mirror fallback.

Co-authored-by: ovurrsl <ovurrsl@users.noreply.github.com>
Co-authored-by: Kurt Himebauch <136133082+xXJSONDeruloXx@users.noreply.github.com>

2026-10-22 10:12:33 -04:00

..

src

fix: third-party GitHub mirrors only serve downloads with a trusted digest (#1057)

2026-10-22 10:12:33 -04:00

build.gradle

feat: ship proot, DirectAudio, Xbox, Comet and hand tracking as CI-built add-on packs (#1198)

2026-10-20 11:18:44 -04:00