app-builder-lib 27.0.0-alpha.3 → 27.0.0-alpha.5

package/dist/util/toolsetLock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"toolsetLock.d.ts","sourceRoot":"","sources":["../../src/util/toolsetLock.ts"],"names":[],"mappings":"AAQA,wBAAsB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAW3E"}
+{"version":3,"file":"toolsetLock.d.ts","sourceRoot":"","sources":["../../src/util/toolsetLock.ts"],"names":[],"mappings":"AAuBA,wBAAgB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAErE;AAUD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEtE;AASD,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEnE"}

package/dist/util/toolsetLock.js

@@ -3,10 +3,12 @@ import { writeFile } from "fs/promises";
 import * as lockfile from "proper-lockfile";
 import * as os from "os";
 import * as path from "path";
-const LOCK_FILE = path.join(os.tmpdir(), ".electron-builder-toolset.lock");
-export async function withToolsetLock(task) {
-    await writeFile(LOCK_FILE, "", { flag: "a" });
-    const release = await lockfile.lock(LOCK_FILE, {
+const TOOLSET_LOCK_FILE = path.join(os.tmpdir(), ".electron-builder-toolset.lock");
+const SIGNTOOL_LOCK_FILE = path.join(os.tmpdir(), ".electron-builder-signtool.lock");
+const ICONS_LOCK_FILE = path.join(os.tmpdir(), ".electron-builder-icons.lock");
+async function withLock(lockFile, task) {
+    await writeFile(lockFile, "", { flag: "a" });
+    const release = await lockfile.lock(lockFile, {
         retries: { retries: 100, minTimeout: 1000, maxTimeout: 5000 },
         stale: 120_000,
     });
@@ -14,7 +16,31 @@ export async function withToolsetLock(task) {
         return await task();
     }
     finally {
-        await release().catch((err) => log.warn({ err }, "failed to release toolset lock"));
+        await release().catch((err) => log.warn({ err }, "failed to release lock"));
     }
 }
+export function withToolsetLock(task) {
+    return withLock(TOOLSET_LOCK_FILE, task);
+}
+// `signtool sign /f <pfx>` imports the PFX via PFXImportCertStore, which mutates the per-user
+// CryptoAPI/CNG key+cert storage — a process-global resource that is not safe for concurrent access.
+// winPackager already serializes signing within a single packager (signingQueue), but parallel builds
+// (e.g. the test harness running multiple packagers across vitest workers that share one Windows user
+// profile) race on that shared store and intermittently fail, after cert selection, with
+// "SignTool Error: An error occurred while attempting to load the signing certificate". A dedicated
+// cross-process lock (separate from the toolset lock so it does not block MSI/Squirrel builds)
+// serializes signtool invocations. No-op overhead for real single builds, which are already serial.
+export function withSigntoolLock(task) {
+    return withLock(SIGNTOOL_LOCK_FILE, task);
+}
+// The icons toolset CLI (icon-tool.js) converts via a WebAssembly-backed image pipeline, and each
+// invocation reserves a large `WebAssembly.Memory`. A single build converting one icon is fine, but
+// parallel builds — most acutely the test harness running many packagers across forked vitest workers
+// on one machine — spawn enough concurrent icon-tool processes to exhaust memory, failing with
+// "WebAssembly.Memory(): could not allocate memory". A cross-process lock (separate from the toolset
+// lock so it does not serialize against MSI/Squirrel/DMG builds) caps icon conversion at one at a
+// time. No-op overhead for real single builds, which are already serial.
+export function withIconsLock(task) {
+    return withLock(ICONS_LOCK_FILE, task);
+}
 //# sourceMappingURL=toolsetLock.js.map

package/dist/util/toolsetLock.js.map

@@ -1 +1 @@
-{"version":3,"file":"toolsetLock.js","sourceRoot":"","sources":["../../src/util/toolsetLock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gCAAgC,CAAC,CAAA;AAE1E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,IAAsB;IAC7D,MAAM,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;QAC7C,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;QAC7D,KAAK,EAAE,OAAO;KACf,CAAC,CAAA;IACF,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAA;IACrB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,gCAAgC,CAAC,CAAC,CAAA;IAC5F,CAAC;AACH,CAAC","sourcesContent":["import { log } from \"builder-util\"\nimport { writeFile } from \"fs/promises\"\nimport * as lockfile from \"proper-lockfile\"\nimport * as os from \"os\"\nimport * as path from \"path\"\n\nconst LOCK_FILE = path.join(os.tmpdir(), \".electron-builder-toolset.lock\")\n\nexport async function withToolsetLock<T>(task: () => Promise<T>): Promise<T> {\n  await writeFile(LOCK_FILE, \"\", { flag: \"a\" })\n  const release = await lockfile.lock(LOCK_FILE, {\n    retries: { retries: 100, minTimeout: 1000, maxTimeout: 5000 },\n    stale: 120_000,\n  })\n  try {\n    return await task()\n  } finally {\n    await release().catch((err: Error) => log.warn({ err }, \"failed to release toolset lock\"))\n  }\n}\n"]}
+{"version":3,"file":"toolsetLock.js","sourceRoot":"","sources":["../../src/util/toolsetLock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAE5B,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gCAAgC,CAAC,CAAA;AAClF,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iCAAiC,CAAC,CAAA;AACpF,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAA;AAE9E,KAAK,UAAU,QAAQ,CAAI,QAAgB,EAAE,IAAsB;IACjE,MAAM,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE;QAC5C,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;QAC7D,KAAK,EAAE,OAAO;KACf,CAAC,CAAA;IACF,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAA;IACrB,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAA;IACpF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAI,IAAsB;IACvD,OAAO,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAA;AAC1C,CAAC;AAED,8FAA8F;AAC9F,qGAAqG;AACrG,sGAAsG;AACtG,sGAAsG;AACtG,yFAAyF;AACzF,oGAAoG;AACpG,+FAA+F;AAC/F,oGAAoG;AACpG,MAAM,UAAU,gBAAgB,CAAI,IAAsB;IACxD,OAAO,QAAQ,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAA;AAC3C,CAAC;AAED,kGAAkG;AAClG,oGAAoG;AACpG,sGAAsG;AACtG,+FAA+F;AAC/F,qGAAqG;AACrG,kGAAkG;AAClG,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAI,IAAsB;IACrD,OAAO,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,CAAA;AACxC,CAAC","sourcesContent":["import { log } from \"builder-util\"\nimport { writeFile } from \"fs/promises\"\nimport * as lockfile from \"proper-lockfile\"\nimport * as os from \"os\"\nimport * as path from \"path\"\n\nconst TOOLSET_LOCK_FILE = path.join(os.tmpdir(), \".electron-builder-toolset.lock\")\nconst SIGNTOOL_LOCK_FILE = path.join(os.tmpdir(), \".electron-builder-signtool.lock\")\nconst ICONS_LOCK_FILE = path.join(os.tmpdir(), \".electron-builder-icons.lock\")\n\nasync function withLock<T>(lockFile: string, task: () => Promise<T>): Promise<T> {\n  await writeFile(lockFile, \"\", { flag: \"a\" })\n  const release = await lockfile.lock(lockFile, {\n    retries: { retries: 100, minTimeout: 1000, maxTimeout: 5000 },\n    stale: 120_000,\n  })\n  try {\n    return await task()\n  } finally {\n    await release().catch((err: Error) => log.warn({ err }, \"failed to release lock\"))\n  }\n}\n\nexport function withToolsetLock<T>(task: () => Promise<T>): Promise<T> {\n  return withLock(TOOLSET_LOCK_FILE, task)\n}\n\n// `signtool sign /f <pfx>` imports the PFX via PFXImportCertStore, which mutates the per-user\n// CryptoAPI/CNG key+cert storage — a process-global resource that is not safe for concurrent access.\n// winPackager already serializes signing within a single packager (signingQueue), but parallel builds\n// (e.g. the test harness running multiple packagers across vitest workers that share one Windows user\n// profile) race on that shared store and intermittently fail, after cert selection, with\n// \"SignTool Error: An error occurred while attempting to load the signing certificate\". A dedicated\n// cross-process lock (separate from the toolset lock so it does not block MSI/Squirrel builds)\n// serializes signtool invocations. No-op overhead for real single builds, which are already serial.\nexport function withSigntoolLock<T>(task: () => Promise<T>): Promise<T> {\n  return withLock(SIGNTOOL_LOCK_FILE, task)\n}\n\n// The icons toolset CLI (icon-tool.js) converts via a WebAssembly-backed image pipeline, and each\n// invocation reserves a large `WebAssembly.Memory`. A single build converting one icon is fine, but\n// parallel builds — most acutely the test harness running many packagers across forked vitest workers\n// on one machine — spawn enough concurrent icon-tool processes to exhaust memory, failing with\n// \"WebAssembly.Memory(): could not allocate memory\". A cross-process lock (separate from the toolset\n// lock so it does not serialize against MSI/Squirrel/DMG builds) caps icon conversion at one at a\n// time. No-op overhead for real single builds, which are already serial.\nexport function withIconsLock<T>(task: () => Promise<T>): Promise<T> {\n  return withLock(ICONS_LOCK_FILE, task)\n}\n"]}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const PACKAGE_VERSION = "27.0.0-alpha.3";
+export declare const PACKAGE_VERSION = "27.0.0-alpha.5";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,2 +1,2 @@
-export const PACKAGE_VERSION = "27.0.0-alpha.3";
+export const PACKAGE_VERSION = "27.0.0-alpha.5";
 //# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAA","sourcesContent":["export const PACKAGE_VERSION = \"27.0.0-alpha.3\"\n"]}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAA","sourcesContent":["export const PACKAGE_VERSION = \"27.0.0-alpha.5\"\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "app-builder-lib",
   "description": "electron-builder lib",
-  "version": "27.0.0-alpha.3",
+  "version": "27.0.0-alpha.5",
   "type": "module",
   "main": "./dist/index.js",
   "exports": {
@@ -98,9 +98,9 @@
     "undici": "^7.27.1",
     "unzipper": "^0.12.3",
     "which": "^5.0.0",
-    "builder-util": "27.0.0-alpha.3",
-    "electron-publish": "27.0.0-alpha.3",
-    "builder-util-runtime": "10.0.0-alpha.2"
+    "builder-util": "27.0.0-alpha.5",
+    "builder-util-runtime": "10.0.0-alpha.4",
+    "electron-publish": "27.0.0-alpha.5"
   },
   "///": "babel in devDependencies for proton tests",
   "devDependencies": {
@@ -115,12 +115,12 @@
     "@types/unzipper": "^0.10.11",
     "@types/which": "^3.0.4",
     "toml": "^3.0.0",
-    "dmg-builder": "27.0.0-alpha.3",
-    "electron-builder-squirrel-windows": "27.0.0-alpha.3"
+    "dmg-builder": "27.0.0-alpha.5",
+    "electron-builder-squirrel-windows": "27.0.0-alpha.5"
   },
   "peerDependencies": {
-    "dmg-builder": "27.0.0-alpha.3",
-    "electron-builder-squirrel-windows": "27.0.0-alpha.3"
+    "dmg-builder": "27.0.0-alpha.5",
+    "electron-builder-squirrel-windows": "27.0.0-alpha.5"
   },
   "//": "electron-builder-squirrel-windows and dmg-builder added as dev dep for tests (as otherwise `require` doesn't work using Yarn 2)",
   "types": "./dist/index.d.ts",