BootstrapMate v2026.06.23.0617

Build info

This release was built with .NET SDK 10.0.301 on Microsoft Windows Server 2025 Datacenter, via a GitHub Actions workflow here: https://github.com/bootstrapmate/bootstrapmate-windows/actions/runs/28029128067. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• installer: wait on _MSIExecute mutex instead of failing on 1618 in #9

Full Changelog: v2026.06.22.1233...v2026.06.23.0617

Signing for enterprise deployment

Sign the MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

Get-ChildItem -Filter "BootstrapMate-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Deployment

Deploy the signed MSI via Intune or any standard MDM tool. Registry-based detection rule:
HKLM:\SOFTWARE\BootstrapMate → Version equals v2026.06.23.0617

Built from commit 1d9f1025df790984b3a4464fb25e87a815121591.

BootstrapMate v2026.06.22.1233

Build info

This release was built with .NET SDK 10.0.301 on Microsoft Windows Server 2025 Datacenter, via a GitHub Actions workflow here: https://github.com/bootstrapmate/bootstrapmate-windows/actions/runs/27978716546. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• Verify installer Authenticode signatures before running elevated in #5
• Rename policy detector and references to Management in #6
• Post a vendor-neutral run summary on completion in #7
• Rename CLI executable to managedbootstrapinstall.exe in #8

Full Changelog: v2026.06.04.1150...v2026.06.22.1233

Signing for enterprise deployment

Sign the MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

Get-ChildItem -Filter "BootstrapMate-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Deployment

Deploy the signed MSI via Intune or any standard MDM tool. Registry-based detection rule:
HKLM:\SOFTWARE\BootstrapMate → Version equals v2026.06.22.1233

Built from commit 0d9a0f96b5907b57e30a6250649cab47af29680b.

BootstrapMate v2026.06.04.1150

Build info

This release was built with .NET SDK 10.0.300 on Microsoft Windows Server 2025 Datacenter, via a GitHub Actions workflow here: https://github.com/bootstrapmate/bootstrapmate-windows/actions/runs/26972601209. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• wxs: delegate post-install to SelfHeal scheduled task by @rodchristiansen in #4

Full Changelog: v2026.06.03.2126...v2026.06.04.1150

Signing for enterprise deployment

Sign the MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

Get-ChildItem -Filter "BootstrapMate-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Deployment

Deploy the signed MSI via Intune or any standard MDM tool. Registry-based detection rule:
HKLM:\SOFTWARE\BootstrapMate → Version equals v2026.06.04.1150

Built from commit ce4eb44309b19862a9c65f926d5e66e9be7955d8.

BootstrapMate v2026.06.03.2126

Build info

This release was built with .NET SDK 10.0.300 on Microsoft Windows Server 2025 Datacenter, via a GitHub Actions workflow here: https://github.com/bootstrapmate/bootstrapmate-windows/actions/runs/26930673950. It is provided unsigned — see signing instructions at the bottom.

Full Changelog: v2026.05.28.1943...v2026.06.03.2126

Signing for enterprise deployment

Sign the MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

Get-ChildItem -Filter "BootstrapMate-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Deployment

Deploy the signed MSI via Intune or any standard MDM tool. Registry-based detection rule:
HKLM:\SOFTWARE\BootstrapMate → Version equals v2026.06.03.2126

Built from commit 6cdff57168dab226f6ca9c9d509ca3bcd2351abd.

BootstrapMate v2026.05.28.1943

Build info

This release was built with .NET SDK 10.0.300 on Microsoft Windows Server 2025 Datacenter, via a GitHub Actions workflow here: https://github.com/bootstrapmate/bootstrapmate-windows/actions/runs/26598146940. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• fix: Start Menu shortcut + KB display for sub-MB downloads by @rodchristiansen in #3

Full Changelog: v2026.05.09.1757...v2026.05.28.1943

Signing for enterprise deployment

Sign the MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

Get-ChildItem -Filter "BootstrapMate-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Deployment

Deploy the signed MSI via Intune or any standard MDM tool. Registry-based detection rule:
HKLM:\SOFTWARE\BootstrapMate → Version equals v2026.05.28.1943

Built from commit 3020468ba423b13e6f9f0605cba2e49978805acf.

BootstrapMate v2026.05.09.1757

Build info

This release was built with .NET SDK 10.0.x (preview) on Microsoft Windows Server 2022 Datacenter (windows-latest), via a GitHub Actions workflow here: https://github.com/bootstrapmate/bootstrapmate-windows/actions/runs/25616054654. It is provided unsigned — see signing instructions at the bottom.

What's Changed

• fix(build): reliable signtool resolution on clean Windows SDK hosts by @rodchristiansen in #1
• fix(msi): ship WinUI 3 GUI; pick host-arch makepri.exe by @rodchristiansen in #2

New Contributors

• @rodchristiansen made their first contribution in #1

Full Changelog: v2026.03.08.0733...v2026.05.09.1757

Signing for enterprise deployment

Sign the MSIs with your organization's code signing certificate before distribution:

$cert = "Your Certificate Name"
$timestampUrl = "http://timestamp.digicert.com"

Get-ChildItem -Filter "BootstrapMate-*.msi" | ForEach-Object {
    signtool sign /fd SHA256 /tr $timestampUrl /td SHA256 /n $cert $_.FullName
}

Deployment

Deploy the signed MSI via Intune or any standard MDM tool. Registry-based detection rule:
HKLM:\SOFTWARE\BootstrapMate → Version equals v2026.05.09.1757

Built from commit b6bbb5b39f4c7950324e4d9a600045ea19838046.

v2026.03.08.0733

Code Signing

The binaries in this release are unsigned. If your organisation requires signed executables before deployment, sign them locally with signtool.exe from the Windows SDK:

# Sign with a certificate already in your local store (match by thumbprint)
signtool.exe sign `
  /s My `
  /sha1 <YOUR_CERT_THUMBPRINT> `
  /fd SHA256 /td SHA256 `
  /tr http://timestamp.digicert.com `
  /v BootstrapMate-<arch>-<version>.msi

# Or sign with a PFX file
signtool.exe sign `
  /f "C:\path\to\cert.pfx" `
  /p "<pfx-password>" `
  /fd SHA256 /td SHA256 `
  /tr http://timestamp.digicert.com `
  /v BootstrapMate-<arch>-<version>.msi

To find certificates already installed on your machine:

Get-ChildItem Cert:\CurrentUser\My, Cert:\LocalMachine\My |
  Where-Object { $_.EnhancedKeyUsageList.ObjectId -contains "1.3.6.1.5.5.7.3.3" } |
  Select-Object Thumbprint, Subject, NotAfter

Alternatively, run .\build.ps1 -ListCerts from the BootstrapMate source tree to list available code-signing certificates.

Deployment

Deploy the signed MSI via Intune or any standard MDM tool. Registry-based detection rule:
HKLM:\SOFTWARE\BootstrapMate → Version equals v2026.03.08.0733

Full Changelog: https://github.com/bootstrapmate/bootstrapmate-windows/commits/v2026.03.08.0733