add sha256 for release files (#2830)

Author: JacobCoffee

downloads/api.py

@@ -68,7 +68,7 @@ class Meta(GenericResource.Meta):
             'name', 'slug',
             'creator', 'last_modified_by',
             'os', 'release', 'description', 'is_source', 'url', 'gpg_signature_file',
-            'md5_sum', 'filesize', 'download_button', 'sigstore_signature_file',
+            'md5_sum', 'sha256_sum', 'filesize', 'download_button', 'sigstore_signature_file',
             'sigstore_cert_file', 'sigstore_bundle_file', 'sbom_spdx2_file',
         ]
         filtering = {

downloads/migrations/0014_releasefile_sha256_sum.py

@@ -0,0 +1,18 @@
+# Generated by Django 4.2.26 on 2025-11-27 16:45
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('downloads', '0013_alter_release_content_markup_type'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='releasefile',
+            name='sha256_sum',
+            field=models.CharField(blank=True, max_length=200, verbose_name='SHA256 Sum'),
+        ),
+    ]

downloads/models.py

@@ -360,6 +360,7 @@ class ReleaseFile(ContentManageable, NameSlugModel):
         "SPDX-2 SBOM URL", blank=True, help_text="SPDX-2 SBOM URL"
     )
     md5_sum = models.CharField('MD5 Sum', max_length=200, blank=True)
+    sha256_sum = models.CharField('SHA256 Sum', max_length=200, blank=True)
     filesize = models.IntegerField(default=0)
     download_button = models.BooleanField(default=False, help_text="Use for the supernav download button for this OS")
 

downloads/serializers.py

@@ -43,6 +43,7 @@ class Meta:
             'url',
             'gpg_signature_file',
             'md5_sum',
+            'sha256_sum',
             'filesize',
             'download_button',
             'resource_uri',

templates/downloads/release_detail.html

@@ -74,7 +74,8 @@ <h3>{{ f.os.name }}</h3>
               <th>Version</th>
               <th>Operating System</th>
               <th>Description</th>
-              <th>MD5 Sum</th>
+              <th>MD5 Checksum</th>
+              <th>SHA256 Checksum</th>
               <th>File Size</th>
               {% if release_files|has_sigstore_materials %}
               <th colspan="2"><a href="https://www.python.org/download/sigstore/">Sigstore</a></th>
@@ -94,6 +95,7 @@ <h3>{{ f.os.name }}</h3>
                 <td>{{ f.os.name }}</td>
                 <td>{{ f.description }}</td>
                 <td>{{ f.md5_sum }}</td>
+                <td>{{ f.sha256_sum|default:"n/a" }}</td>
                 <td>{{ f.filesize|filesizeformat }}</td>
                 {% if release_files|has_sigstore_materials %}
                   {% if f.sigstore_bundle_file %}