rds_ssm_connect 1.7.6 → 1.7.7

package/.github/workflows/release.yml

@@ -101,9 +101,16 @@ jobs:
         id: version
         run: echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
 
+      - name: Download signature files from release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          mkdir -p sigs
+          gh release download "v${{ steps.version.outputs.VERSION }}" --pattern '*.sig' --dir sigs || true
+
       - name: Generate latest.json
         run: |
-          node scripts/generate-update-json.js ${{ steps.version.outputs.VERSION }} https://github.com/${{ github.repository }}/releases/download/v${{ steps.version.outputs.VERSION }}
+          node scripts/generate-update-json.js ${{ steps.version.outputs.VERSION }} https://github.com/${{ github.repository }}/releases/download/v${{ steps.version.outputs.VERSION }} sigs
 
       - name: Upload latest.json to release
         uses: softprops/action-gh-release@v1

package/connect.js

@@ -10,7 +10,7 @@ import { promisify } from 'node:util'
 import { PROJECT_CONFIGS } from './envPortMapping.js'
 
 // Package info for version checking
-const packageJson = { name: 'rds_ssm_connect', version: '1.7.6' }
+const packageJson = { name: 'rds_ssm_connect', version: '1.7.7' }
 
 const execAsync = promisify(exec)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rds_ssm_connect",
-  "version": "1.7.6",
+  "version": "1.7.7",
   "type": "module",
   "repository": {
     "type": "git",

package/scripts/generate-update-json.js

@@ -6,8 +6,8 @@
  * This script generates the update manifest that needs to be uploaded
  * to GitHub releases for auto-updates to work.
  *
- * Usage: node scripts/generate-update-json.js <version> <release-url>
- * Example: node scripts/generate-update-json.js 1.7.0 https://github.com/yarka-guru/connection_app/releases/download/v1.7.0
+ * Usage: node scripts/generate-update-json.js <version> <release-url> [sigs-dir]
+ * Example: node scripts/generate-update-json.js 1.7.0 https://github.com/yarka-guru/connection_app/releases/download/v1.7.0 sigs
  */
 
 import fs from 'node:fs'
@@ -18,6 +18,7 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url))
 
 const version = process.argv[2]
 const releaseUrl = process.argv[3]
+const sigsDir = process.argv[4] // Optional: directory containing .sig files downloaded from release
 
 if (!version || !releaseUrl) {
   process.exit(1)
@@ -30,7 +31,38 @@ const tauriConf = JSON.parse(
     'utf-8',
   ),
 )
-const productName = tauriConf.productName.replace(/\s+/g, '_')
+// Tauri uses dots for spaces in bundle filenames
+const productName = tauriConf.productName.replace(/\s+/g, '.')
+
+// Read signature from a .sig file (downloaded from release or local build)
+function readSig(assetFilename) {
+  const sigFilename = `${assetFilename}.sig`
+
+  // Try sigs directory first (CI: downloaded from release assets)
+  if (sigsDir) {
+    try {
+      return fs.readFileSync(path.join(sigsDir, sigFilename), 'utf-8').trim()
+    } catch {}
+  }
+
+  // Try local build output
+  const bundleDir = path.join(__dirname, '../src-tauri/target/release/bundle')
+  for (const subdir of ['macos', 'appimage', 'nsis']) {
+    try {
+      return fs
+        .readFileSync(path.join(bundleDir, subdir, sigFilename), 'utf-8')
+        .trim()
+    } catch {}
+  }
+
+  return ''
+}
+
+const macAarch64 = `${productName}_aarch64.app.tar.gz`
+const macX64 = `${productName}_x64.app.tar.gz`
+const linuxAmd64 = `${productName}_${version}_amd64.AppImage`
+const linuxAarch64 = `${productName}_${version}_aarch64.AppImage`
+const windowsX64 = `${productName}_${version}_x64-setup.exe`
 
 const updateManifest = {
   version: version,
@@ -38,24 +70,24 @@ const updateManifest = {
   pub_date: new Date().toISOString(),
   platforms: {
     'darwin-aarch64': {
-      url: `${releaseUrl}/${productName}_${version}_aarch64.app.tar.gz`,
-      signature: '',
+      url: `${releaseUrl}/${macAarch64}`,
+      signature: readSig(macAarch64),
     },
     'darwin-x86_64': {
-      url: `${releaseUrl}/${productName}_${version}_x64.app.tar.gz`,
-      signature: '',
+      url: `${releaseUrl}/${macX64}`,
+      signature: readSig(macX64),
     },
     'linux-x86_64': {
-      url: `${releaseUrl}/${productName}_${version}_amd64.AppImage.tar.gz`,
-      signature: '',
+      url: `${releaseUrl}/${linuxAmd64}`,
+      signature: readSig(linuxAmd64),
     },
     'linux-aarch64': {
-      url: `${releaseUrl}/${productName}_${version}_aarch64.AppImage.tar.gz`,
-      signature: '',
+      url: `${releaseUrl}/${linuxAarch64}`,
+      signature: readSig(linuxAarch64),
     },
     'windows-x86_64': {
-      url: `${releaseUrl}/${productName}_${version}_x64-setup.nsis.zip`,
-      signature: '',
+      url: `${releaseUrl}/${windowsX64}`,
+      signature: readSig(windowsX64),
     },
   },
 }

package/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "rds-ssm-connect"
-version = "1.7.6"
+version = "1.7.7"
 description = "Secure RDS connections through AWS SSM"
 authors = ["Iaroslav Pyrogov"]
 edition = "2024"

package/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "RDS SSM Connect",
-  "version": "1.7.6",
+  "version": "1.7.7",
   "identifier": "com.rds-ssm-connect.desktop",
   "build": {
     "beforeDevCommand": "npm run dev:vite",
@@ -47,7 +47,7 @@
       "endpoints": [
         "https://github.com/yarka-guru/connection_app/releases/latest/download/latest.json"
       ],
-      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDI2MTFEQjk0MjUzRTgwQTEKUldTaGdENGxsTnNSSms1dTVvcWVKWUc2aFlOYVl5ODcvbVhiekVsVWxHbVlnRERSNjJsTHZPYkMK"
+      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IEYxRjNDRkY1MkI1NTM2MzIKUldReU5sVXI5Yy96OGRNdjlHd3BqcTBkL0E4c2ZwUTRlL3VsZXVTdkNWRGxKL1A5ckNYNGdDNVoK"
     }
   }
 }