chore(updater): embed signing public key

George Hu · claude · George Hu · commit e7ecc738c5b7 · 2026-06-08T00:12:32.000+08:00
Generated a minisign keypair for the in-app updater. Public key is
embedded here so the desktop app can verify update bundles. The matching
private key (no password) lives in two GitHub Actions secrets:
  - TAURI_SIGNING_PRIVATE_KEY
  - TAURI_SIGNING_PRIVATE_KEY_PASSWORD (empty)

With this in place, the next release tag will publish signed updater
artifacts alongside the installers, and existing users will see the
update inside Settings → About on next launch.

Co-Authored-By: Claude Opus 4 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
@@ -51,7 +51,7 @@
     "updater": {
       "active": true,
       "dialog": false,
-      "pubkey": "",
+      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDgzQ0I0REFGMkQzNzRFOEUKUldTT1RqY3RyMDNMZzVKd1RZN0ZucTlhTCtLOS9GVDZ5eXErallMZjdXdzd2Sk5DRW8zSTRPUlIK",
       "endpoints": [
         "https://github.com/hujiulin/EchoWise/releases/latest/download/latest.json"
       ]

Original file line number	Diff line number	Diff line change
`@@ -51,7 +51,7 @@`
`51`	`51`	`"updater": {`
`52`	`52`	`"active": true,`
`53`	`53`	`"dialog": false,`
`54`		`- "pubkey": "",`
	`54`	`+ "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDgzQ0I0REFGMkQzNzRFOEUKUldTT1RqY3RyMDNMZzVKd1RZN0ZucTlhTCtLOS9GVDZ5eXErallMZjdXdzd2Sk5DRW8zSTRPUlIK",`
`55`	`55`	`"endpoints": [`
`56`	`56`	`"https://github.com/hujiulin/EchoWise/releases/latest/download/latest.json"`
`57`	`57`	`]`