What probably matters to youSection of the release
What
A marketplace entry can now point at a plugin as an archive: an HTTPS URL for a zip file, with an optional sha256 digest. The digest is checked on every download and also serves as the plugin's version identity, so a changed archive is a changed version. This source type is always available, not gated.
Details
If the zip contains a single wrapping directory, it is stripped so the plugin's files land at the top level.
Archives must be served over HTTPS.
Evidence
HTTPS URL of a zip archive containing the plugin.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
