Release/v3.2.4

.github/actions/deploy-aur/action.yml

@@ -87,11 +87,19 @@ runs:
 
         cp "$GITHUB_WORKSPACE/${{ inputs.pkgbuild }}" ./PKGBUILD
 
+        if [[ "${{ inputs.updpkgsums }}" == "true" ]]; then
+          if command -v updpkgsums >/dev/null 2>&1; then
+            updpkgsums PKGBUILD
+          else
+            echo "::warning::updpkgsums requested but pacman-contrib is not installed in the fallback environment; sha256sums left unchanged"
+          fi
+        fi
+
         if [[ "${{ inputs.regenerate_srcinfo }}" == "true" ]]; then
           docker run --rm -v "$(pwd)":/pkg archlinux:latest \
             bash -c "useradd -m builder \
               && cp /pkg/PKGBUILD /home/builder/ \
-              && su builder -c 'cd /home/builder && makepkg --printsrcinfo >> /pkg/.SRCINFO'"
+              && su builder -c 'cd /home/builder && makepkg --printsrcinfo > /pkg/.SRCINFO'"
         fi
 
         git config user.name "${{ inputs.commit_username }}"

.github/actions/determine-version/action.yml

@@ -1,17 +1,21 @@
 name: Determine Version
-description: Extract and validate a semantic version from Directory.Build.props and optionally validate against a branch or tag name
+description: Extract and validate a semantic version from project
 
 inputs:
   file-name:
     description: The filename where the dotnet msbuild command can extract the version. Provide the full path from repo root!
     required: false
-    default: 'Directory.Build.props'
+    default: 'OpenSSH_GUI/OpenSSH_GUI.csproj'
 
   property:
     description: The property where the dotnet msbuild command must look for the verison
     required: false
-    default: 'BaseVersion'
-
+    default: 'Version'
+
+  suffix:
+    description: The Suffix to use, when any
+    required: false
+    default: ''
 
 outputs:
   version:
@@ -25,31 +29,34 @@ runs:
   using: composite
 
   steps:
-    - name: Extract BaseVersion
+    - name: Extract Version
       id: extract
       shell: bash
       run: |
         set -euo pipefail
 
         FILE="${{ inputs.file-name }}"
+        SUFFIX="${{ inputs.suffix }}"
 
         if [[ ! -f "$FILE" ]]; then
           echo "::error::$FILE not found"
           exit 1
         fi
 
-        VERSION="$(dotnet msbuild "$FILE" -nologo -getProperty:${{ inputs.property }} | tr -d '\r')"
+        BUILD_VERSION="$(dotnet msbuild "$FILE" -nologo -getProperty:${{ inputs.property }} -p:VersionSuffix="$SUFFIX" | tr -d '\r')"
 
-        if [[ -z "$VERSION" ]]; then
+        if [[ -z "$BUILD_VERSION" ]]; then
           echo "::error::${{ inputs.property }} not found in $FILE"
           exit 1
         fi
 
+        VERSION="${BUILD_VERSION%%-*}"
+
         if ! [[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
           echo "::error::Invalid Property ${{ inputs.property }}: $VERSION"
           exit 1
         fi
 
-        echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+        echo "version=$BUILD_VERSION" >> "$GITHUB_OUTPUT"
         echo "tag=v$VERSION" >> "$GITHUB_OUTPUT"
-        echo "::notice::Detected version: $VERSION (tag: v$VERSION)"
+        echo "::notice::Detected version: $BUILD_VERSION (tag: v$VERSION)"

.github/workflows/auto-tag.yml

@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout merge commit
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.merge_commit_sha }}

.github/workflows/build-and-package.yml

@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup .NET environment
         uses: actions/setup-dotnet@v5
@@ -41,28 +41,9 @@ jobs:
             **/Directory.Packages.props
             **/Directory.Build.props
 
-      - name: Normalize version and build flags
-        id: meta
-        shell: bash
-        run: |
-          set -euo pipefail
-          VERSION="${{ inputs.version }}"
-          VERSION="${VERSION#v}"
-          echo "VERSION=$VERSION" >> "$GITHUB_OUTPUT"
-
       - name: Install/Restore dependencies
         shell: bash
         run: dotnet restore --runtime "${{ matrix.target }}"
-
-      - name: Build application
-        shell: bash
-        run: |
-          set -euo pipefail
-          dotnet build OpenSSH_GUI/OpenSSH_GUI.csproj \
-            --configuration Release \
-            --no-restore \
-            --runtime "${{ matrix.target }}" \
-            -p:Version="${{ steps.meta.outputs.VERSION }}"
 
       - name: Publish application
         shell: bash
@@ -75,7 +56,7 @@ jobs:
             -p:PublishSingleFile=true \
             -p:PublishReadyToRun=true \
             -p:IncludeNativeLibrariesForSelfExtract=true \
-            -p:Version="${{ steps.meta.outputs.VERSION }}"
+            -p:Version="${{ inputs.version }}"
 
       - name: Rename artifact for distribution
         id: rename
@@ -97,7 +78,7 @@ jobs:
         uses: ./.github/actions/build-appimage
         with:
           binary-path: ./publish/${{ steps.rename.outputs.ASSET_NAME }}
-          version: ${{ steps.meta.outputs.VERSION }}
+          version: ${{ inputs.version }}
           asset-prefix: ${{ inputs.asset_name_prefix }}
 
       - name: Upload AppImage

.github/workflows/build.yml

@@ -4,8 +4,8 @@ on:
   push:
     tags:
       - 'v[0-9]*.[0-9]*.[0-9]*'
-  workflow_dispatch: 
-
+    branches:
+      - master
 
 permissions:
   contents: write
@@ -29,7 +29,7 @@ jobs:
       tag: ${{ steps.version.outputs.tag }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: '1'
           ref: ${{ github.ref }}
@@ -50,11 +50,15 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     needs: [test, prepare, build]
+    if: startsWith(github.ref, 'refs/tags/')
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
-
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: '1'
+          ref: ${{ github.ref }}
+
       - name: Download Windows binary
         uses: actions/download-artifact@v8
         with:
@@ -105,10 +109,11 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     needs: [test, prepare, build, create_installer]
+    if: startsWith(github.ref, 'refs/tags/')
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Download all build artifacts
         uses: actions/download-artifact@v8
@@ -171,4 +176,4 @@ jobs:
         with:
           event-type: deploy
           token: ${{ secrets.PAT_TOKEN }}
-          client_payload: '{"tag": "${{ needs.prepare.outputs.tag }}"}'
+          client-payload: '{"tag": "${{ needs.prepare.outputs.tag }}", "version": "${{ needs.prepare.outputs.version }}"}'

.github/workflows/deploy-release.yml

@@ -3,58 +3,27 @@ name: Deploy release to consumers
 on:
   repository_dispatch: 
     types: [deploy]
-  workflow_dispatch:
-    inputs:
-      tag:
-        description: 'Release tag (e.g. v1.2.3)'
-        required: true
-        type: string
 
 permissions:
   contents: read
 
 jobs:
-  get_version:
-    name: Extract Version
-    runs-on: ubuntu-latest
-    outputs:
-      version: ${{ steps.parse.outputs.version }}
-      tag: ${{ steps.parse.outputs.tag }}
-
-    steps:
-      - name: Parse release metadata
-        id: parse
-        run: |
-          set -euo pipefail
-
-          TAG="${{ github.event.client_payload.tag || inputs.tag }}"
-
-          if [[ -z "$TAG" ]]; then
-            echo "::error::No tag available — triggered via workflow_dispatch without tag input"
-            exit 1
-          fi
-
-          VERSION="${TAG#v}"
-          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
-          echo "tag=$TAG" >> "$GITHUB_OUTPUT"
-
   aur_publish:
     name: Publish AUR packages
     runs-on: ubuntu-latest
     timeout-minutes: 10
-    needs: get_version
 
     steps:
       - name: Checkout PKGBUILD only
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
-          ref: ${{ github.event.release.tag_name || inputs.tag }}
+          ref: ${{ github.event.client_payload.tag }}
 
       - name: Update PKGBUILD version
         run: |
           set -euo pipefail
 
-          VERSION="${{ needs.get_version.outputs.version }}"
+          VERSION="${{ github.event.client_payload.version }}"
 
           sed -i "s/^pkgver=.*/pkgver=$VERSION/" openssh-gui-bin/PKGBUILD
           sed -i "s/^pkgrel=.*/pkgrel=1/" openssh-gui-bin/PKGBUILD
@@ -67,15 +36,15 @@ jobs:
           ssh_private_key: ${{ secrets.AUR_SSH_PRIVATE_KEY }}
           commit_username: ${{ github.repository_owner }}
           commit_email: ${{ github.repository_owner }}@users.noreply.github.com
-          commit_message: "Update to ${{ needs.get_version.outputs.tag }}"
+          commit_message: "Update to ${{ github.event.client_payload.tag }}"
           force_push: 'false'
           regenerate_srcinfo: 'false'
           updpkgsums: 'true'
 
   winget_publish:
     name: Update Winget Package
     runs-on: ubuntu-slim
-    needs: [aur_publish, get_version]
+    needs: aur_publish
     timeout-minutes: 10
     steps:
       - name: Update Winget manifest
@@ -84,7 +53,7 @@ jobs:
           max-versions-to-keep: 5
           identifier: frequency403.OpenSSHGUI
           fork-user: ${{ github.repository_owner }}
-          version: ${{ needs.get_version.outputs.version }}
-          release-tag: ${{ needs.get_version.outputs.tag }}
+          version: ${{ github.event.client_payload.version }}
+          release-tag: ${{ github.event.client_payload.tag }}
           installers-regex: 'Setup\.exe$'
           token: ${{ secrets.WINGET_PUBLISH_TOKEN }}