From a6dfec6724247709261a35637c66576f5301f6b5 Mon Sep 17 00:00:00 2001
From: t8y2 <1156263951@qq.com>
Date: Thu, 23 Jul 2026 09:27:34 +0800
Subject: [PATCH] fix(ci): pass empty updater signing password

---
 .github/workflows/release.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fd0cdcd0c..c9d4c616d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -248,6 +248,7 @@ jobs:
 
       - name: Upload Windows portable ZIP
         if: matrix.arch == 'x64' || matrix.arch == 'arm64'
+        timeout-minutes: 20
         shell: pwsh
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -287,7 +288,13 @@ jobs:
           Set-Content -Path (Join-Path $portableDir "portable-update.json") -Value $manifest -Encoding utf8NoBOM
 
           Compress-Archive -Path (Join-Path $portableDir "*") -DestinationPath $zipName -Force
-          pnpm tauri signer sign $zipName
+          # Tauri prompts interactively when the password is omitted, so pass an explicit
+          # empty value for the existing passwordless updater key used by DBX releases.
+          if ([string]::IsNullOrEmpty($env:TAURI_SIGNING_PRIVATE_KEY_PASSWORD)) {
+            pnpm tauri signer sign "--password=" $zipName
+          } else {
+            pnpm tauri signer sign $zipName
+          }
 
           $signatureName = "${zipName}.sig"
           if (!(Test-Path $signatureName)) {