Forcing SSL site-wide but non HTTPS links remain in sitemap

Hi. I recently forced SSL across my entire site. However links in my sitemap.xml file are all non HTTPS. My base store URL is http://ww... Are sitemap links being constructed from this base URL. Would I need to change it to https://ww...? Thanks.

Yes, and yes.
When you force SSL, you are essentially just redirecting traffic...the base URL in your configuration is used for many things. On most, because the web.config is handling things, the customer ends up at the https version of your page..whereas, the sitemap builder, image references, and some message tokens are derived from the base URL, so yes...fix your base URL to https.

Thanks. Looks like I'll just need to change the base URL to match the secure URL. All media files - JS, CSS and images - (nopCommerce 3.5) use relative paths so they're unaffected.

It's alrady fixed. Please have a look at the latest version.

Right, so it's a bug that's fixed in a later version. I did change the base URL to HTTPS and this had no affect on sitemap.xml. I can't update to a newer version just yet so I'll have to live with it for now!

Just on sitemap.xml generation, I noticed that published subcategories within an unpublished parent category are not included in sitemap.xml. Is this how it should function? Also, I can't see any documentation that tells you when or what causes a sitemap to be regenerated? On product or category update? Thanks in advance.

The sitemap is generated "on the fly" as it is being accessed...at the exact moment it is loading, it queries all topic pages, categories, manufacturers, and products in your site and builds the xml file.