From f6ce6941f0915b57cb7cd5b699ec6b842bf93625 Mon Sep 17 00:00:00 2001
From: Neil <4138956+nwparker@users.noreply.github.com>
Date: Tue, 12 May 2026 00:26:35 -0700
Subject: [PATCH] Fix signed Windows updater checksum metadata

---
 .github/workflows/release-cut.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release-cut.yml b/.github/workflows/release-cut.yml
index 584b694cb87..9a950972787 100644
--- a/.github/workflows/release-cut.yml
+++ b/.github/workflows/release-cut.yml
@@ -736,7 +736,10 @@ jobs:
           }
 
           $latestYml = Get-Content -Path 'dist/latest.yml' -Raw
-          $latestYml = $latestYml -replace '(?m)^sha512: .+$', "sha512: $hash"
+          $latestYml = [regex]::Replace($latestYml, '(?m)^(\s*)sha512: .+$', {
+            param($match)
+            "$($match.Groups[1].Value)sha512: $hash"
+          })
           $latestYml = $latestYml -replace '(?m)^    size: \d+$', "    size: $($installer.Length)"
           $latestYml = $latestYml -replace '(?m)^    blockMapSize: \d+$', "    blockMapSize: $($blockmap.Length)"
           Set-Content -Path 'dist/latest.yml' -Value $latestYml -NoNewline