Skip to content

fix(release): locate signed NSIS installer as the Windows updater artifact#1032

Open
wpfleger96 wants to merge 1 commit into
mainfrom
duncan/windows-updater-archive
Open

fix(release): locate signed NSIS installer as the Windows updater artifact#1032
wpfleger96 wants to merge 1 commit into
mainfrom
duncan/windows-updater-archive

Conversation

@wpfleger96

Copy link
Copy Markdown
Collaborator

Problem

The Locate Windows build artifacts step in release.yml globbed for a *.nsis.zip updater archive that Tauri 2.x no longer produces. With createUpdaterArtifacts: true (the v2 updater format), the NSIS installer is signed in place — <name>-setup.exe plus a detached <name>-setup.exe.sig — and that signed installer is the updater artifact. The .nsis.zip was the deprecated v1Compatible format.

The dead glob returned empty and tripped the not-found guard, failing every Windows release run after a clean installer build (the *.exe find succeeds, then the *.nsis.zip find fails). This was the sole remaining blocker on Windows releases once the sqlite link fix (#1029) landed.

Fix

Capture the installer's own .sig (SIG="${EXE}.sig") instead of globbing for the nonexistent .nsis.zip, and rename it in lockstep with the .exe so the rolling-release archive name and its detached signature stay consistent. The archive / archive_name / sig outputs now point at the marked installer and its sig.

The Windows latest.json updater URL consequently points at the full *_alpha-unsigned.exe rather than a .nsis.zip — correct v2 updater behavior, symmetric with Linux serving the renamed .AppImage directly. The name chain is single-sourced: uploaded-object-name, archive_name, manifest URL, and verify URL all derive from the one outputs.archive pair and cannot diverge.

Related: #1029 (Windows sqlite link fix, already merged — this is the next layer down).

…ifact

The Locate Windows build artifacts step globbed for a *.nsis.zip updater
archive that Tauri 2.x no longer produces. With createUpdaterArtifacts the
NSIS installer is signed in place — <name>-setup.exe plus a detached
<name>-setup.exe.sig — and that signed installer IS the updater artifact;
the .nsis.zip was the deprecated v1Compatible format. The dead glob returned
empty and tripped the not-found guard, failing every Windows release after a
clean installer build. Capture the installer's own .sig and rename it in
lockstep with the exe so the rolling-release archive name and its detached
signature stay consistent.

Co-authored-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant