From 85c1366b5865cfae396035fa8955b3f0016061c6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cristian=20Cezar=20Mois=C3=A9s?= <sac@securityops.co>
Date: Mon, 31 Aug 2026 14:31:18 -0300
Subject: [PATCH] packaging: pin 5.2.2 source archive checksums

---
 packaging/aur/PKGBUILD     | 2 +-
 packaging/guix/zupt.scm    | 2 +-
 packaging/homebrew/zupt.rb | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/packaging/aur/PKGBUILD b/packaging/aur/PKGBUILD
index b24a5a2..a8db31b 100644
--- a/packaging/aur/PKGBUILD
+++ b/packaging/aur/PKGBUILD
@@ -23,7 +23,7 @@ checkdepends=('python')
 
 source=("${pkgname}-${pkgver}.tar.gz::https://github.com/cristiancmoises/zupt/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.gz")
 # Updated from the byte-reproducible upstream release archive before publishing.
-sha256sums=('REPLACE_AFTER_FINAL_RELEASE_ARCHIVE_IS_BUILT')
+sha256sums=('ee28e7be2b8725189b88ea13e0951c535d3516b44b47d05d5f1fce245d64c553')
 
 build() {
     cd "${pkgname}-${pkgver}"
diff --git a/packaging/guix/zupt.scm b/packaging/guix/zupt.scm
index 6d6e262..5bf9421 100644
--- a/packaging/guix/zupt.scm
+++ b/packaging/guix/zupt.scm
@@ -72,7 +72,7 @@
           "/releases/download/v" %zupt-version
           "/zupt-" %zupt-version ".tar.gz"))
     (sha256
-    (base32 "REPLACE_AFTER_FINAL_RELEASE_ARCHIVE_IS_BUILT"))))
+    (base32 "0ly5cifj9khzbxfx0isbnhb3apak3jay04zai2dih9c75fzffa7f"))))
 
 (define-public zupt
   (package
diff --git a/packaging/homebrew/zupt.rb b/packaging/homebrew/zupt.rb
index 4945fa8..e853f2a 100644
--- a/packaging/homebrew/zupt.rb
+++ b/packaging/homebrew/zupt.rb
@@ -24,7 +24,7 @@ class Zupt < Formula
   homepage "https://github.com/cristiancmoises/zupt"
   url "https://github.com/cristiancmoises/zupt/releases/download/v5.2.2/zupt-5.2.2.tar.gz"
   version "5.2.2"
-  sha256 "REPLACE_WITH_SHA256_OF_RELEASE_TARBALL"
+  sha256 "ee28e7be2b8725189b88ea13e0951c535d3516b44b47d05d5f1fce245d64c553"
   license all_of: ["AGPL-3.0-or-later", "GPL-3.0-or-later", "BSD-2-Clause", "BSD-3-Clause", "CC0-1.0"]
 
   depends_on "python@3.12" => :test  # only for test-suite tamper harness