Ramnique Singh 95618a364f feat(x): sign Windows builds with Azure Trusted Signing in CI (#783) ... * feat(x): sign Windows builds with Azure Trusted Signing in CI Wire windowsSign (packager + Squirrel maker) through Azure Trusted Signing's signtool dlib. Signing activates only when the CI env vars are present; local and mac/linux builds are unaffected. The Windows job stages the dlib, metadata.json, and a modern SDK signtool under C:\azsign (space-free paths — @electron/windows-sign splits signWithParams on spaces). Requires repo secrets: AZURE_TENANT_ID, AZURE_CLIENT_ID, AZURE_CLIENT_SECRET, AZURE_ENDPOINT, AZURE_CODE_SIGNING_NAME, AZURE_CERT_PROFILE_NAME. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(ci): use renamed Microsoft.ArtifactSigning.Client NuGet package Microsoft renamed Trusted Signing to Artifact Signing and delisted the old Microsoft.Trusted.Signing.Client package, which broke the setup step. The dlib inside kept its Azure.CodeSigning.Dlib.dll filename; locate it by search instead of a hardcoded path so future package reshuffles fail loudly rather than at a stale path. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(ci): don't run bare signtool in the signing setup step signtool with no arguments prints usage and exits 1, and the Actions pwsh wrapper propagates the last native exit code as the step result, failing the job after an otherwise successful setup. Log the signtool version from file metadata instead. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(x): stage only the current platform's node-pty prebuilds Every build shipped all platforms' prebuilt binaries. Windows code signing walks every .node file in the app and signtool hard-fails on the Mach-O darwin pty.node ("file format cannot be signed"). Filtering to the host platform fixes signing and drops dead weight from all installers. The Linux CI-compiled prebuild and the node-gyp self-heal path both still stage correctly. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>		2026-07-23 14:12:39 +05:30
..
electron-build.yml	feat(x): sign Windows builds with Azure Trusted Signing in CI (#783)	2026-07-23 14:12:39 +05:30
x-tests.yml	ci(x): typecheck test files — the gap vitest and the build tsconfigs both miss	2026-07-10 16:30:26 +05:30