tiennm99 9a9b01ff07 ci: scope the updater signing key to signing steps and split the legacy publish job ...

The signing key moves from job-level to step-level env, so npm install scripts, setup actions and crate build scripts never see it. Linux compiles without the key and signs in a separate tauri bundle step. The legacy rollback builds and signs under a read-only, unpersisted token with the locked Tauri CLI, and a separate job holds the write token to publish.

2026-10-21 17:29:56 +07:00

..

ci.yml

fix: list the desktop icons in bundle.icon

2026-10-21 12:04:54 +07:00

release-legacy.yml

ci: scope the updater signing key to signing steps and split the legacy publish job

2026-10-21 17:29:56 +07:00

release.yml

ci: scope the updater signing key to signing steps and split the legacy publish job

2026-10-21 17:29:56 +07:00