rds_ssm_connect 1.7.9 → 1.7.11

package/.github/workflows/release.yml

@@ -59,6 +59,10 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
 
+      - name: Install dependencies (macOS)
+        if: startsWith(matrix.platform, 'macos')
+        run: brew install pango
+
       - name: Install frontend dependencies
         run: npm ci
 
@@ -81,32 +85,56 @@ jobs:
           releaseBody: 'See the assets to download this version and install.'
           releaseDraft: true
           prerelease: false
+          includeUpdaterJson: false
           args: --target ${{ matrix.rust_target }}
 
-      - name: Save updater signature
+      - name: Sign updater artifact and save signature
         shell: bash
+        env:
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
         run: |
           mkdir -p sigs
           BUNDLE="src-tauri/target/${{ matrix.rust_target }}/release/bundle"
-          echo "Looking for .sig files in $BUNDLE"
-          for sigfile in \
-            "$BUNDLE"/macos/*.app.tar.gz.sig \
-            "$BUNDLE"/appimage/*.AppImage.sig \
-            "$BUNDLE"/nsis/*.nsis.zip.sig; do
-            if [ -f "$sigfile" ]; then
-              cp "$sigfile" "sigs/${{ matrix.rust_target }}.sig"
-              echo "Saved: $sigfile"
-              break
-            fi
+
+          # Find the updater artifact — must match what generate-update-json.js URLs point to:
+          # macOS: .app.tar.gz, Linux: .AppImage, Windows: -setup.exe
+          UPDATER_FILE=""
+          for pattern in "$BUNDLE"/macos/*.app.tar.gz "$BUNDLE"/appimage/*.AppImage "$BUNDLE"/nsis/*-setup.exe; do
+            for f in $pattern; do
+              if [ -f "$f" ]; then
+                UPDATER_FILE="$f"
+                break 2
+              fi
+            done
           done
-          ls -la sigs/ 2>/dev/null || echo "No signatures saved"
+
+          if [ -z "$UPDATER_FILE" ]; then
+            echo "WARNING: No updater artifact found"
+            find "$BUNDLE" -type f 2>/dev/null | head -20
+            exit 0
+          fi
+
+          echo "Signing: $UPDATER_FILE"
+          npx tauri signer sign "$UPDATER_FILE" --private-key "$TAURI_SIGNING_PRIVATE_KEY" --password "$TAURI_SIGNING_PRIVATE_KEY_PASSWORD"
+
+          # The signer creates a .sig file alongside the original
+          SIG_FILE="${UPDATER_FILE}.sig"
+          if [ -f "$SIG_FILE" ]; then
+            cp "$SIG_FILE" "sigs/${{ matrix.rust_target }}.sig"
+            echo "Signature saved ($(wc -c < "$SIG_FILE") bytes)"
+            cat "$SIG_FILE"
+          else
+            echo "ERROR: .sig file not created at $SIG_FILE"
+            exit 1
+          fi
 
       - name: Upload signature artifact
         uses: actions/upload-artifact@v4
         with:
           name: sig-${{ matrix.rust_target }}
           path: sigs/
-          if-no-files-found: ignore
+          if-no-files-found: error
 
   # Generate update manifest after all builds complete
   update-manifest:
@@ -135,13 +163,17 @@ jobs:
 
       - name: Generate latest.json
         run: |
-          ls -la sigs/ 2>/dev/null || echo "No signatures found"
+          echo "=== Downloaded signatures ==="
+          ls -la sigs/
+          echo "=== Signature contents ==="
+          for f in sigs/*.sig; do echo "--- $f ---"; cat "$f"; done
           node scripts/generate-update-json.js ${{ steps.version.outputs.VERSION }} https://github.com/${{ github.repository }}/releases/download/v${{ steps.version.outputs.VERSION }} sigs
 
       - name: Upload latest.json to release
-        uses: softprops/action-gh-release@v1
-        with:
-          files: latest.json
-          tag_name: v${{ steps.version.outputs.VERSION }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          TAG="v${{ steps.version.outputs.VERSION }}"
+          echo "=== latest.json content ==="
+          cat latest.json
+          gh release upload "$TAG" latest.json --clobber

package/connect.js

@@ -10,7 +10,7 @@ import { promisify } from 'node:util'
 import { PROJECT_CONFIGS } from './envPortMapping.js'
 
 // Package info for version checking
-const packageJson = { name: 'rds_ssm_connect', version: '1.7.9' }
+const packageJson = { name: 'rds_ssm_connect', version: '1.7.11' }
 
 const execAsync = promisify(exec)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rds_ssm_connect",
-  "version": "1.7.9",
+  "version": "1.7.11",
   "type": "module",
   "repository": {
     "type": "git",

package/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "rds-ssm-connect"
-version = "1.7.9"
+version = "1.7.11"
 description = "Secure RDS connections through AWS SSM"
 authors = ["Iaroslav Pyrogov"]
 edition = "2024"

package/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "RDS SSM Connect",
-  "version": "1.7.9",
+  "version": "1.7.11",
   "identifier": "com.rds-ssm-connect.desktop",
   "build": {
     "beforeDevCommand": "npm run dev:vite",