# Pinned binary versions and their SHA-256 hashes.
#
# Source of truth (NOT a CN mirror) — fetched once via update-checksums.ps1:
#   uv:          https://github.com/astral-sh/uv/releases/download/<ver>/<file>.sha256
#   PortableGit: https://github.com/git-for-windows/git/releases/tag/v<ver>.windows.1   (release notes body)
#   Node.js:     https://nodejs.org/dist/v<ver>/SHASUMS256.txt                          (gpg-signed by Node release team)
#
# install-cn.ps1 downloads each binary from a fast CN mirror and verifies
# bytes against the hash below. Hash mismatch -> installer aborts.
#
# Format (one record per binary, blank line between):
#   tool=<name>
#   version=<version>
#   arch=<x64|arm64>
#   filename=<basename>
#   sha256=<hex>
#   official_url=<canonical GitHub/nodejs.org URL>
#   mirror_url=<fast CN mirror URL>

tool=uv
version=0.11.14
arch=x64
filename=uv-x86_64-pc-windows-msvc.zip
sha256=52ba5d19409aaa688a8a1a6ec8dfb6a4817230d20186e75f4006105c3e39a846
official_url=https://github.com/astral-sh/uv/releases/download/0.11.14/uv-x86_64-pc-windows-msvc.zip
mirror_url=https://gh-proxy.com/https://github.com/astral-sh/uv/releases/download/0.11.14/uv-x86_64-pc-windows-msvc.zip

tool=uv
version=0.11.14
arch=arm64
filename=uv-aarch64-pc-windows-msvc.zip
sha256=d66c76ba912ba66fed011e0189dfbc4527dd9e620a2b5d5d5ecd2ad8936601b8
official_url=https://github.com/astral-sh/uv/releases/download/0.11.14/uv-aarch64-pc-windows-msvc.zip
mirror_url=https://gh-proxy.com/https://github.com/astral-sh/uv/releases/download/0.11.14/uv-aarch64-pc-windows-msvc.zip

tool=portablegit
version=2.54.0
arch=x64
filename=PortableGit-2.54.0-64-bit.7z.exe
sha256=bea006a6cc69673f27b1647e84ab3a68e912fbc175ab6320c5987e012897f311
official_url=https://github.com/git-for-windows/git/releases/download/v2.54.0.windows.1/PortableGit-2.54.0-64-bit.7z.exe
mirror_url=https://mirrors.tuna.tsinghua.edu.cn/github-release/git-for-windows/git/LatestRelease/PortableGit-2.54.0-64-bit.7z.exe

tool=portablegit
version=2.54.0
arch=arm64
filename=PortableGit-2.54.0-arm64.7z.exe
sha256=f8e92cd3359fcbb96998cfd606a536ccc6dbfb23c04e12b29042f9ba45b6b0c7
official_url=https://github.com/git-for-windows/git/releases/download/v2.54.0.windows.1/PortableGit-2.54.0-arm64.7z.exe
mirror_url=https://mirrors.tuna.tsinghua.edu.cn/github-release/git-for-windows/git/LatestRelease/PortableGit-2.54.0-arm64.7z.exe

tool=node
version=20.20.2
arch=x64
filename=node-v20.20.2-win-x64.zip
sha256=dc3700fdd57a63eedb8fd7e3c7baaa32e6a740a1b904167ff4204bc68ed8bf77
official_url=https://nodejs.org/dist/v20.20.2/node-v20.20.2-win-x64.zip
mirror_url=https://npmmirror.com/mirrors/node/v20.20.2/node-v20.20.2-win-x64.zip

tool=node
version=20.20.2
arch=arm64
filename=node-v20.20.2-win-arm64.zip
sha256=d5c5b1d56f7f9469830eb1f57efeec0a6a9078c0a9e88cd5b4b4b48f46c22069
official_url=https://nodejs.org/dist/v20.20.2/node-v20.20.2-win-arm64.zip
mirror_url=https://npmmirror.com/mirrors/node/v20.20.2/node-v20.20.2-win-arm64.zip