0.1.3

package.json

@@ -1,6 +1,6 @@
 {
   "name": "zinnia",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "private": true,
   "description": "Cross-platform 7z GUI built with Tauri.",
   "type": "module",

scripts/gpg-sign.js

@@ -231,6 +231,28 @@ function releaseAssetUrl(fileName) {
   return `${RELEASE_DOWNLOAD_BASE_URL}/${encodeURIComponent(fileName)}`;
 }
 
+function normalizeUpdaterSignature(sigPath) {
+  const trimmed = fs.readFileSync(sigPath, "utf8").trim();
+  if (!trimmed) {
+    return trimmed;
+  }
+
+  // Tauri v2 `.sig` files are base64
+  try {
+    const decoded = Buffer.from(trimmed, "base64").toString("utf8");
+    if (decoded.includes("untrusted comment:")) {
+      return trimmed;
+    }
+  } catch {
+  }
+
+  if (trimmed.includes("untrusted comment:")) {
+    return Buffer.from(trimmed, "utf8").toString("base64");
+  }
+
+  return trimmed;
+}
+
 function generateUpdaterManifests(files) {
   const byName = new Map();
   for (const filePath of files) {
@@ -256,7 +278,7 @@ function generateUpdaterManifests(files) {
       continue;
     }
 
-    const signature = fs.readFileSync(sigPath).toString("base64");
+    const signature = normalizeUpdaterSignature(sigPath);
     const url = releaseAssetUrl(name);
     for (const target of targets) {
       const manifestName = `latest-${target.os}-${target.arch}.json`;