define env properties

see https://bugs.openjdk.org/browse/JDK-8370027
see https://adoptium.net/de/temurin/release-notes?version=jdk-25.0.2+10

.github/workflows/win-exe.yml

@@ -60,6 +60,8 @@ env:
   VERSION_NUM: ${{ inputs.semVerNum || '99.99.99'}}
   REVISION_NUM: ${{ inputs.revisionNum || '0' }}
   VERSION_SUFFIX: ${{ inputs.semVerSuffix || ''}}
+  OPENJDK_JMODS_AMD64: 'https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.2%2B10/OpenJDK25U-jmods_x64_windows_hotspot_25.0.2_10.zip'
+  OPENJDK_JMODS_AMD64_HASH: 'a28a3c75911d8f5a02571e46a1859aec2e172a4829bf6e9a89715c882a853d77'
   OPENJFX_JMODS_AMD64: 'https://download2.gluonhq.com/openjfx/25.0.2/openjfx-25.0.2_windows-x64_bin-jmods.zip'
   OPENJFX_JMODS_AMD64_HASH: '33d878dfac85590c4d77c518ed413e512d34a8479d90132b230a7ddd173576b3'
   WINFSP_MSI: 'https://github.com/winfsp/winfsp/releases/download/v2.1/winfsp-2.1.25156.msi'
@@ -82,8 +84,8 @@ jobs:
         include:
           - arch: x64
             os: windows-latest
-            java-dist: 'zulu' #cannot use temurin, see https://github.com/cryptomator/cryptomator/issues/3824#issuecomment-2829827427
-            java-version: '25.0.1+8'
+            java-dist: 'temurin'
+            java-version: '25.0.2+10.0.LTS'
             java-package: 'jdk'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
@@ -223,8 +225,15 @@ jobs:
       - name: Extract wixhelper.dll for Codesigning #see https://github.com/cryptomator/cryptomator/issues/3130
         shell: pwsh
         run: |
+          curl --silent --fail-with-body --proto "=https" -L "${{ env.OPENJDK_JMODS_AMD64 }}" --output openjdk-jmods.zip
+          if(!(Get-FileHash -Path openjdk-jmods.zip -Algorithm SHA256).Hash.ToLower().equals("${{ env.OPENJDK_JMODS_AMD64_HASH }}")) {
+            throw "Wrong checksum of JMOD archive downloaded from ${{ env.OPENJDK_JMODS_AMD64 }}.";
+          }
+          Expand-Archive -Path openjdk-jmods.zip -DestinationPath openjdk-jmods
+          Get-ChildItem -Path openjdk-jmods -Recurse -Filter "*.jmod" | ForEach-Object { Move-Item -Path $_ -Destination $_.Directory.Parent}
+          
           New-Item -Path appdir/jpackage-jmod -ItemType Directory
-          & $env:JAVA_HOME\bin\jmod.exe extract --dir jpackage-jmod "${env:JAVA_HOME}\jmods\jdk.jpackage.jmod"
+          & $env:JAVA_HOME\bin\jmod.exe extract --dir jpackage-jmod "openjdk-jmods\jdk.jpackage.jmod"
           Get-ChildItem -Recurse -Path "jpackage-jmod" -File wixhelper.dll | Select-Object -Last 1 | Copy-Item -Destination "appdir"
       - name: Sign DLLs with Azure Trusted Signing
         if: inputs.sign || github.event_name == 'schedule'