Merge pull request #1 from johnstegeman/fix/sha256sums-filename

johnstegeman · web-flow · commit 770837061b49 · 2026-03-26T13:56:30.000-04:00
fix: upgrade checksum URL (v0.7.1)
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -11,6 +11,16 @@ Versioning: [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
 
+## [v0.7.1] — 2026-03-26
+
+### Fixed
+
+- **`hv upgrade` checksum verification** — the upgrade command was requesting
+  `SHA256SUMS` but the release workflow publishes `haven-vX.Y.Z-SHA256SUMS`.
+  This caused all self-upgrade attempts from v0.7.0 to fail with a 404 error.
+
+---
+
 ## [v0.7.0] — 2026-03-26
 
 ### Added
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "haven"
-version = "0.7.0"
+version = "0.7.1"
 edition = "2021"
 description = "AI-first dotfiles & environment manager"
 license = "MIT"
diff --git a/src/commands/upgrade.rs b/src/commands/upgrade.rs
@@ -225,7 +225,7 @@ pub fn run(opts: &UpgradeOptions) -> Result<()> {
         REPO, latest
     );
     let archive_url = format!("{}/{}", base_url, archive_name);
-    let shasums_url = format!("{}/SHA256SUMS", base_url);
+    let shasums_url = format!("{}/haven-v{}-SHA256SUMS", base_url, latest);
 
     println!("Downloading {}...", archive_name);
     let archive_bytes = download_bytes(&archive_url)
