huanld 53cd8e0109 ci(release): signing waterfall so forks build without upstream secrets ...

Forks do not inherit repository secrets, and the previous hardwired
Azure Trusted Signing steps failed the Windows job outright on a fork.
Each signing step is now gated on its credentials being present and the
pipeline falls through: Azure Trusted Signing (upstream setup, unchanged
when the secrets exist) -> PFX certificate from WINDOWS_PFX_BASE64 /
WINDOWS_PFX_PASSWORD via signtool with RFC-3161 timestamping -> unsigned
with a note in the job summary. The build and installer assembly always
complete.

2026-09-16 17:34:27 +07:00

..

workflows

ci(release): signing waterfall so forks build without upstream secrets

2026-09-16 17:34:27 +07:00

FUNDING.yml

Update GitHub Sponsors username in FUNDING.yml

2026-07-29 10:56:22 +03:00