Update Windows deps SHA256/size, add deps-version.json step to release checklist

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: StuartCameronCode

CLAUDE.md

@@ -486,8 +486,9 @@ Prerequisites: draft release must exist for the tag, `gh` CLI authenticated.
 1. **Confirm version** — ask user, update `pubspec.yaml`
 2. **Check deps** — run `check-deps-changed.sh`; if changed, bump version in `deps-version.json`
 3. **Build & package** — use packaging scripts (or `release.sh` for full automation)
-4. **Test** — fresh install + upgrade test
-5. **Create GitHub releases** — deps release first (if changed, tag `deps-vX.Y.Z`), then app release (tag `vX.Y.Z`)
+4. **Update `app/assets/deps-version.json`** — after packaging each platform's deps zip, update its `sha256` and `size` fields with the values printed by the packaging script. **Both platforms must have valid (non-null) sha256 and size before release.** The app uses these values to verify downloaded deps at runtime.
+5. **Test** — fresh install + upgrade test
+6. **Create GitHub releases** — deps release first (if changed, tag `deps-vX.Y.Z`), then app release (tag `vX.Y.Z`)
 
 ### Cross-Platform Notes
 

app/assets/deps-version.json

@@ -5,8 +5,8 @@
   "platforms": {
     "windows-x64": {
       "filename": "VapourBox-deps-1.3.0-windows-x64.zip",
-      "sha256": null,
-      "size": null
+      "sha256": "b404bc4434b47116dc8acb152c139327c7d59fa9eee4e30a8d8b1a1f09b0799d",
+      "size": 172721085
     },
     "macos-arm64": {
       "filename": "VapourBox-deps-1.3.0-macos-arm64.zip",