v0.5.2

Hash the root .nuspec like dnx instead of SHA512 of the whole nupkg.

Package hash

.nupkg.sha512 (and .nupkg.metadata contentHash) is now Base64(SHA512(root nuspec)) — the same shortcut dnx writes via CryptoHashProvider("SHA512").CalculateHash(reader.GetNuspec()).

Restore hashes the entire nupkg. Tool packages are never part of a plain dotnet restore, can be large (Native AOT RID payloads), and only the manifest is needed to recognize an install. Packages already extracted by dnx stay cache hits.

Sponsors

The following sponsors made this release possible: @clarius, @MFB-Technologies-Inc, @sandrock, @drivenet, @Keflon, @tbolon, @kfrancis, @rbnswartz, @jfoshee, @Mrxx99, @eajhnsn1, @Jonathan-Hickey, @KenBonny, @SimonCropp, @agileworks-eu, @arsdragonfly, @vezel-dev, @ChilliCream, @4OTC, @DominicSchell, @adalon, @torutek, @mccaffers, @SeikaLogiciel, @wizardness, @eska-gmbh, @geodata-no.

Thanks 💜