fix(contracts): canonicalize release bytes as LF

Author: Aitomates

.github/workflows/contract-registry-live.yml

@@ -24,10 +24,10 @@ jobs:
           import hashlib, json, os, pathlib, urllib.request
 
           def canonical_bytes(data: bytes) -> bytes:
-              return data.replace(b"\r\n", b"\n").replace(b"\n", b"\r\n")
+              return data.replace(b"\r\n", b"\n")
 
           def sha256_hex(data: bytes) -> str:
-              return hashlib.sha256(data).hexdigest()
+              return hashlib.sha256(canonical_bytes(data)).hexdigest()
 
           base = os.environ["REGISTRY_BASE"]
           version = os.environ["PINNED_VERSION"]

src/GsdOrchestrator.Tests/ContractCompatibilityTests.cs

@@ -41,7 +41,7 @@ private static JsonNode LoadSchema(string name) =>
     private static byte[] ReadCanonicalUtf8Bytes(string path)
     {
         var text = File.ReadAllText(path);
-        var normalized = text.ReplaceLineEndings("\r\n");
+        var normalized = text.ReplaceLineEndings("\n");
         return Encoding.UTF8.GetBytes(normalized);
     }
 
@@ -133,7 +133,7 @@ public void VendoredRelease_MatchesManifestHashes()
         {
             var path = (string)entry!["path"]!;
             var expected = (string)entry["sha256"]!;
-            var bytes = File.ReadAllBytes(Path.Combine(ContractRoot, path));
+            var bytes = ReadCanonicalUtf8Bytes(Path.Combine(ContractRoot, path));
             var actual = Sha256Hex(bytes);
             Assert.Equal(expected, actual);
         }