feat(releases): publish signed per-user MSI installers #47
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: KofTwentyTwo/standards#47
Reference in new issue
Block a user
Provide optional per-user MSI alongside existing EXE/ZIP assets using pinned Velopack1.2.161. Keep the existing signing hook, preserve third-party signatures, verify the administratively extracted MSI payload through the existing signed-archive verifier, require native MSI install/window launch/uninstall before publication, and include MSI in SBOM subjects/checksums/provenance. The default remains EXE-only for existing callers.
Validation: actionlint and configured zizmor medium gate pass; all40 signing regressions pass with zero skips. A real native MSI fixture compiles and the actual GitHub-wrapped extraction body preserves all6 signed input application binaries byte-for-byte. Native MSI ProductCode lookup succeeds. The first local administrative target exceeded Windows Installer's path limit; a short normal temporary root succeeds, matching hosted runner paths. This fixture is unsigned and not published; production MSI signing/installation is required before claiming delivery.
The maintainer explicitly renewed EXE+MSI delivery and instructed completion without further human-review requests. Existing publication authorization applies. No Azure identity, scope or credential changes. Substantial AI assistance: Codex GPT-6. Refs KofTwentyTwo/MarkdownViewr.Windows#36 and #33.
Automated review of exact8463119884d58ab37eca29fc2d8189ee164dfe0b (Codex): no findings identified. Optional MSI remains false for existing callers. Per-user scope matches the EXE install model; existing signing hook handles the generated MSI; extracted payload is checked against the signed manifest through the existing verifier; bounded install/launch/uninstall precedes publication; SBOM includes MSI. The owner explicitly renewed MSI delivery and waived further human-review requests. This records authorization, not a fabricated personal-read acknowledgement. All hosted checks pass;40 signing regressions and real fixture MSI compilation/extraction/product query pass. Actual signed production MSI lifecycle remains a required release gate.