fix(upgrade): U-02 — validate version in minisign trusted comment against release tag

2026-09-19 09:43:39 +02:00
parent 78a9c233f8
commit 8dd54494b0
4 changed files with 87 additions and 6 deletions
@@ -110,7 +110,7 @@ $SigFile = Join-Path $DistDir "SHA256SUMS.txt.minisig"
 if (Test-Path $KeyFile) {
    if (Test-Path $MinisignExe) {
        if (Test-Path $SigFile) { Remove-Item $SigFile -Force }
-        & $MinisignExe -S -s $KeyFile -m $ChecksumFile -W -x $SigFile
+        & $MinisignExe -S -s $KeyFile -m $ChecksumFile -W -x $SigFile -t "version:$Version"
        if ($LASTEXITCODE -eq 0 -and (Test-Path $SigFile)) {
            Write-Host "[OK] Minisign-Signatur erstellt: dist\SHA256SUMS.txt.minisig" -ForegroundColor Green
        } else {