From f09be27450a2cb67ba5faa61c75aa0945f659c88 Mon Sep 17 00:00:00 2001
From: Steve Dower <steve.dower@python.org>
Date: Mon, 30 Jun 2025 22:16:10 +0100
Subject: [PATCH 1/2] Generate MD5 hashes on release

---
 ci/release.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/ci/release.yml b/ci/release.yml
index a0f7a3b..561cff4 100644
--- a/ci/release.yml
+++ b/ci/release.yml
@@ -323,6 +323,19 @@ stages:
         workingDirectory: $(Pipeline.Workspace)
         displayName: 'Download PuTTY binaries'
 
+      - powershell: |
+          $files = gci -File * -EA SilentlyContinue
+          $hashes = $files  | `
+              Sort-Object Name | `
+              Format-Table Name, @{
+                Label="MD5";
+                Expression={(Get-FileHash $_ -Algorithm MD5).Hash}
+              }, Length -AutoSize | `
+              Out-String -Width 4096
+          $hashes
+        workingDirectory: $(DIST_DIR)
+        displayName: 'Generate hashes (MD5)'
+
       - ${{ if ne(parameters.PublishAppinstaller, 'true') }}:
         - powershell: |
             "Not uploading these files:"

From e19f728355e7df6431d637e8ea42730df0579cb7 Mon Sep 17 00:00:00 2001
From: Steve Dower <steve.dower@python.org>
Date: Mon, 30 Jun 2025 22:17:47 +0100
Subject: [PATCH 2/2] Always generate hashes

---
 ci/release.yml | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/ci/release.yml b/ci/release.yml
index 561cff4..3b7770d 100644
--- a/ci/release.yml
+++ b/ci/release.yml
@@ -309,6 +309,19 @@ stages:
           Get-AppxPackage PythonSoftwareFoundation.PythonManager | Remove-AppxPackage
         displayName: 'Remove MSIX'
 
+    - powershell: |
+        $files = gci -File * -EA SilentlyContinue
+        $hashes = $files  | `
+            Sort-Object Name | `
+            Format-Table Name, @{
+              Label="MD5";
+              Expression={(Get-FileHash $_ -Algorithm MD5).Hash}
+            }, Length -AutoSize | `
+            Out-String -Width 4096
+        $hashes
+      workingDirectory: $(DIST_DIR)
+      displayName: 'Generate hashes (MD5)'
+
     - ${{ if eq(parameters.Publish, 'true') }}:
       - ${{ if eq(parameters.Sign, 'true') }}:
         - task: DownloadSecureFile@1
@@ -323,19 +336,6 @@ stages:
         workingDirectory: $(Pipeline.Workspace)
         displayName: 'Download PuTTY binaries'
 
-      - powershell: |
-          $files = gci -File * -EA SilentlyContinue
-          $hashes = $files  | `
-              Sort-Object Name | `
-              Format-Table Name, @{
-                Label="MD5";
-                Expression={(Get-FileHash $_ -Algorithm MD5).Hash}
-              }, Length -AutoSize | `
-              Out-String -Width 4096
-          $hashes
-        workingDirectory: $(DIST_DIR)
-        displayName: 'Generate hashes (MD5)'
-
       - ${{ if ne(parameters.PublishAppinstaller, 'true') }}:
         - powershell: |
             "Not uploading these files:"