From ae662e30c4e401312e5bb16fd3a355e316eaa096 Mon Sep 17 00:00:00 2001
From: Remy Duijsens <remyduijsens@gmail.com>
Date: Fri, 25 Sep 2026 19:13:27 +0200
Subject: [PATCH] fix: make release checksums verify beside jars

---
 .github/workflows/release.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b8de9b3..6fff346 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -80,7 +80,11 @@ jobs:
       - name: Resolve published Maven coordinates from a fresh repository
         run: gh haunted-release verify-published "${{ needs.gate.outputs.version }}"
       - name: Checksum distributable
-        run: sha256sum "target/PaperHotReloader-${{ needs.gate.outputs.version }}.jar" > "target/PaperHotReloader-${{ needs.gate.outputs.version }}.jar.sha256"
+        run: |
+          cd target
+          artifact="PaperHotReloader-${{ needs.gate.outputs.version }}.jar"
+          sha256sum "$artifact" > "$artifact.sha256"
+          sha256sum --check "$artifact.sha256"
       - name: Create release after package verification
         run: |
           gh release create "${{ needs.gate.outputs.tag }}" --target "$GITHUB_SHA" --title "PaperHotReloader ${{ needs.gate.outputs.tag }}" --generate-notes \