psadt-deploy-skill 0.26.1 → 0.26.5

package/README.md

@@ -369,6 +369,48 @@ pre-flight fails on non-ASCII without a BOM), and anything that lands in a packa
 Recent releases below; the complete history is in **[CHANGELOG.md](CHANGELOG.md)** (nothing is ever removed
 from either).
 
+### 0.26.5 - 08.09.2026
+- **L.8, new: MSIX/AppX**, verified against Microsoft Learn and against the live cmdlets. MSIX is a two-step
+  model — machine-wide **staging**, then **per-user registration at logon** — and three traps follow from it:
+  **`Add-AppxPackage` as SYSTEM registers the app for the SYSTEM account and reports success** (nobody can launch
+  it), **`Get-AppxPackage` is the wrong detection cmdlet** (finds nothing right after provisioning, so Intune
+  reinstalls forever), and **de-provisioning does not remove the app from existing users** — a complete uninstall
+  needs `Remove-AppxProvisionedPackage` *and* `Remove-AppxPackage -AllUsers`. Plus signing: the certificate
+  Subject must equal the manifest Publisher (so a vendor MSIX cannot just be re-signed), self-signed certs belong
+  in `LocalMachine\TrustedPeople`, and missing timestamping is what makes an expired certificate break installs.
+  And the decision that comes first: **usually don't wrap MSIX in PSADT** — Intune takes it natively.
+- **L.9, new: App-V is not end of life.** The client and sequencer are **no longer deprecated** (fixed extended
+  support, no end date, no extra cost); only the **server components** end in **April 2026**. Also: `-Global` is
+  the device-context switch, and a package in use goes *pending* — a global task applies only after a restart.
+- **The MSIX row in L.2 was misleading and is rewritten**; L.2 gains an App-V row.
+### 0.26.4 - 08.09.2026
+- **L.7, new: Inno Setup and NSIS**, verified against vendor documentation. `/VERYSILENT` **reboots the
+  machine by itself** when a restart is needed — so `/NORESTART` is mandatory, and `/RESTARTEXITCODE=3010`
+  turns the fact into the code Intune already understands. And `Uninstall.exe /S` in NSIS **returns before
+  the uninstall has finished** (it copies itself to temp and detaches), so any verification afterwards races
+  it — `_?=<installdir>` makes it synchronous, must be last, must not be quoted.
+- **Advanced Installer wired into L.1 and L.2**, not just the new L.6 — with a measured fingerprint
+  (`AI_*` custom actions, `aicustact.dll`, `OLDPRODUCTS;AI_NEWERPRODUCTFOUND`).
+### 0.26.3 - 08.09.2026
+- **Appendix L gains three sections**, researched against vendor documentation instead of written from
+  memory: **MSP patches** (the full `/p` matrix, why `/i` and `/p` never combine, and that exit 1642 means
+  *either* "not installed" *or* "wrong patch revision" — so it must not be treated as a blanket success),
+  **WiX Burn bundles** (BundleProviderKey rather than a ProductCode for detection; `/layout` is a Burn
+  action but the bootstrapper decides whether it can be narrowed — the ADK refuses, so an offline layout is
+  always the whole kit), and **Advanced Installer projects** (the `.aip` CLI, a fresh ProductCode per build
+  changing the package identity every time, and the undocumented behaviour that relative paths resolve
+  against the .aip's own location — moving a project between drives breaks it silently).
+### 0.26.2 - 08.09.2026
+- **Fixed: a WHQL driver pack turned the pre-flight red.** `Get-DriverSignatureInfo.ps1` did not strip the
+  inline comment that WHQL packs write after `CatalogFile=` (`; for WHQL certified`), so the catalog never
+  resolved and validly signed drivers classified as `Unsigned` — 6 of 70 INF in a Dell WinPE set, all of
+  whose catalogs were Authenticode-valid and Microsoft-signed. An unquoted `;` now ends the value.
+- **Fixed: `New-MsiPackage.ps1` was the sixth script with the `-File` binder trap.** `-ProcessesToClose
+  'a','b'` arrived as one element, so the scaffold closed no processes at all — silently, while reporting
+  success. 0.25.1 had fixed the other five and missed the generator.
+- **Documented: seven findings from a three-package dependency chain** (Appendix G) and four new
+  anti-patterns (Appendix B), including `msiexec /a` against bundled payload, the `-Include` trap, 8.3
+  short names in path comparisons, and what a service's `%TEMP%` really is on Windows 11.
 ### 0.26.1 - 06.09.2026
 - **Fixed: a syntax error in the template silently killed the whole dossier script.** A `
 ` inside a JS

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "psadt-deploy-skill",
-  "version": "0.26.1",
+  "version": "0.26.5",
   "description": "Installer for the psadt-deploy Claude Code skill: build, test and deploy PSADT v4.x Intune Win32 packages.",
   "keywords": [
     "psadt",