From 2fe35e3f9b29435838ad517dc3e94850985ace2d Mon Sep 17 00:00:00 2001
From: Psychotoxical <dev@psysonic.app>
Date: Thu, 2 Apr 2026 03:07:19 +0200
Subject: [PATCH] =?UTF-8?q?fix:=20v1.27.1=20=E2=80=94=20CI=20signing=20pip?=
 =?UTF-8?q?eline,=20sig=20naming,=20npm+cargo=20caching?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/release.yml | 6 +++++-
 CHANGELOG.md                  | 9 +++++++++
 package.json                  | 2 +-
 src-tauri/Cargo.toml          | 2 +-
 src-tauri/tauri.conf.json     | 2 +-
 5 files changed, 17 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4d731f33..a32f86a0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -134,14 +134,18 @@ jobs:
           if [[ "${{ matrix.settings.platform }}" == "macos-latest" ]]; then
             if [[ "${{ matrix.settings.args }}" == *"aarch64"* ]]; then
               BUNDLE="src-tauri/target/aarch64-apple-darwin/release/bundle/macos/Psysonic.app.tar.gz"
+              SIG_NAME="Psysonic_aarch64.app.tar.gz.sig"
             else
               BUNDLE="src-tauri/target/x86_64-apple-darwin/release/bundle/macos/Psysonic.app.tar.gz"
+              SIG_NAME="Psysonic_x64.app.tar.gz.sig"
             fi
           else
             BUNDLE=$(find src-tauri/target/release/bundle/nsis -name "*.nsis.zip" | head -1)
+            SIG_NAME="Psysonic_${VERSION}_x64-setup.nsis.zip.sig"
           fi
           npx tauri signer sign --private-key "$TAURI_SIGNING_PRIVATE_KEY" --password "$TAURI_SIGNING_PRIVATE_KEY_PASSWORD" "$BUNDLE"
-          gh release upload "app-v${VERSION}" "${BUNDLE}.sig" --clobber
+          cp "${BUNDLE}.sig" "$SIG_NAME"
+          gh release upload "app-v${VERSION}" "$SIG_NAME" --clobber
 
   build-linux:
     needs: create-release
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1ef28948..87dc64a7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.27.1] - 2026-04-02
+
+### Fixed
+
+- **CI: auto-update signing pipeline**: Signing keys were not being picked up by the bundler during the tauri-action build. Replaced with an explicit post-build signing step using `tauri signer sign`. Fixed `.sig` upload names to match platform conventions (`Psysonic_aarch64.app.tar.gz.sig`, `Psysonic_x64.app.tar.gz.sig`) so the manifest generator finds them correctly. First release where the in-app updater is fully functional on macOS and Windows.
+- **CI: npm + Cargo caching** *(requested by [@netherguy4](https://github.com/netherguy4))*: Added `actions/cache` for npm and `Swatinem/rust-cache` for Cargo across all build jobs. Warm-cache builds will be significantly faster on subsequent releases.
+
+---
+
 ## [1.27.0] - 2026-04-02
 
 ### Added
diff --git a/package.json b/package.json
index f5ebe937..8de9243e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "psysonic",
-  "version": "1.27.0",
+  "version": "1.27.1",
   "private": true,
   "scripts": {
     "dev": "vite",
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index daabda8a..7448cf0a 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "psysonic"
-version = "1.27.0"
+version = "1.27.1"
 description = "Psysonic Desktop Music Player"
 authors = []
 license = ""
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
index 07cf8574..c42e5ec3 100644
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Psysonic",
-  "version": "1.27.0",
+  "version": "1.27.1",
   "identifier": "dev.psysonic.player",
   "build": {
     "beforeDevCommand": "npm run dev",