From aaf4ccce9203d943e475e2ad929b2a6fd7f5b92f Mon Sep 17 00:00:00 2001
From: HKLHaoBin <we3q@qq.com>
Date: Sat, 13 Jun 2026 21:44:25 +0800
Subject: [PATCH] chore(updater): rotate minisign pubkey for CI release signing

Pair with TAURI_SIGNING_PRIVATE_KEY set via gh secret set. Old pubkey superseded for new tag releases.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .gitignore                                 | 1 +
 openless-all/app/src-tauri/tauri.conf.json | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index e61d5498..c62e3761 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,6 +11,7 @@ ChatGPT Image*.jpg
 # Local config / secrets
 *.env
 config.local.json
+.local-secrets/
 # Tauri updater 签名私钥（绝不上传 — 公钥在 tauri.conf.json，私钥放 GitHub Secret）
 *.key
 *.key.pub
diff --git a/openless-all/app/src-tauri/tauri.conf.json b/openless-all/app/src-tauri/tauri.conf.json
index ac67c66d..026c9219 100644
--- a/openless-all/app/src-tauri/tauri.conf.json
+++ b/openless-all/app/src-tauri/tauri.conf.json
@@ -149,7 +149,7 @@
   },
   "plugins": {
     "updater": {
-      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDFERUFBODAzNTY0QzMyM0YKUldRL01reFdBNmpxSGE1K0JadlpONXNWTzhJcGZCRGxjUVdIWExNNFJpeUNsSGZwazdlQThhemkK",
+      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDZGNEI1OTk0RjMzMzk0QTkKUldTcGxEUHpsRmxMYjRnMFdZNkFyaVozaHN2SUNwZ01mMDlFS0RMWnNQNisrWjF6czZQQk1RQysK",
       "endpoints": [
         "https://fastgit.cc/https://github.com/appergb/openless/releases/latest/download/latest-{{target}}-{{arch}}-mirror.json",
         "https://github.com/appergb/openless/releases/latest/download/latest-{{target}}-{{arch}}.json"