From 0cca50dec2cd0db6a2dc38238ef0647586436899 Mon Sep 17 00:00:00 2001
From: Bart van Andel <bavanandel@gmail.com>
Date: Fri, 31 Jul 2026 13:03:18 +0200
Subject: [PATCH] fix: compute sha256 hash using online algorithm

No need to read the entire file in memory
---
 Gruntfile.js | 24 +++++++++++++++---------
 1 file changed, 15 insertions(+), 9 deletions(-)

diff --git a/Gruntfile.js b/Gruntfile.js
index 09f79669..8a0c6686 100755
--- a/Gruntfile.js
+++ b/Gruntfile.js
@@ -75,17 +75,23 @@ module.exports = function (grunt) {
         });
 
     grunt.registerTask("calcDownloadHash", "Compute download hash", function () {
-        const computeDigest = p => {
-            const content = fs.readFileSync(p);
-            const hash = crypto.hash("sha256", content);
-            return hash;
-        };
+        const done = this.async();
 
-        const digest = computeDigest(`build/prod/${downloadZipFilename}`);
-        fs.writeFileSync("build/prod/sha256digest.txt", `${digest}\n`, { encoding: "utf8" });
+        const hash = crypto.createHash("sha256");
 
-        const index = fs.readFileSync("build/prod/index.html", { encoding: "utf8" });
-        fs.writeFileSync("build/prod/index.html", index.replace(/DOWNLOAD_HASH_PLACEHOLDER/g, digest), { encoding: "utf8" });
+        // Use online algorithm to calculate hash, prevents reading the entire 75+ MB zip file into memory
+        fs.createReadStream(`build/prod/${downloadZipFilename}`)
+            .on("data", (chunk) => hash.update(chunk))
+            .on("end", () => {
+                const digest = hash.digest("hex");
+                fs.writeFileSync("build/prod/sha256digest.txt", `${digest}\n`, { encoding: "utf8" });
+
+                const index = fs.readFileSync("build/prod/index.html", { encoding: "utf8" });
+                fs.writeFileSync("build/prod/index.html", index.replace(/DOWNLOAD_HASH_PLACEHOLDER/g, digest), { encoding: "utf8" });
+
+                done(true);
+            })
+            .on("error", (err) => done(false));
     });