WinGet Studio v1.9.0

v1.9.0

The tool was renamed. WinGetUpdateTool.exe is now WinGetStudio.exe — the old name only described a third of what it does.

Coming from v1.0.0: download the new exe and delete the old one. The theme preference resets once, having moved to HKCU:\Software\WinGetStudio.

Three tabs instead of one screen
Updates — what it always did: winget upgrade in a checkbox table, sequential upgrades by ID, per-row result and a log.

Install — find and install something new. Results appear as you type, so there is no autocomplete popup: the grid is the suggestion list, and version and ID are visible before choosing.

Searches the local winget catalogue. An MS Store checkbox adds the Microsoft Store, but only for an explicit search, since going online is far slower and cannot keep up with typing.
Scope chooses Auto / User / Machine. The app runs elevated, so it warns once if the elevated account is not the signed-in user, where a per-user package would land in the wrong profile.
Double click a row to install just that one.
Installed — the inventory of the machine, loaded on first entry into the tab rather than at startup.

A filter box narrows the list locally, without calling winget again.
Uninstall is behind a Yes/No confirmation with No as the default, listing the actual package names. If the filter is hiding a ticked package, both the counter and the dialog say so, so nothing is removed off screen.
Packages not installed through winget appear too, with IDs like ARP\Machine\X64\Android Studio, and uninstall like any other.
Pinning
Right click a row in Updates or Installed: Pin (block upgrades) / Remove pin. A pinned package is skipped by updates, including Select all, and shows a pin icon. It can still be uninstalled: a pin blocks upgrades, not removal.

Export and import
Export saves the installed packages to a .json file, Import installs what a list describes — the quick way to rebuild a machine.

Export omits exact versions on purpose: pinning them makes the import fail as soon as one is no longer published.
Import ignores unavailable packages, so a single unpublished one cannot abort everything, and asks for confirmation stating how many packages the file contains — a count read from the file, not an estimate.
Settings screen and automatic updates
The gear button in the top-right corner opens a settings screen (closed by the X or Esc): theme as a Light / Dark / Auto dropdown, the installed version, and Check for updates.

The app checks GitHub for newer releases at startup — one anonymous API call, no token. When one exists, an Update to vX.Y.Z button appears. The download is confirmed explicitly, verified against the SHA-256 GitHub publishes with the asset, and installed by the app replacing itself and restarting. No external updater.

Signed, but by a self-signed certificate
The exe is signed (CN=WinGet Studio, O=EGICON) with a DigiCert timestamp, which proves the file has not been altered since the build.

Windows still says "unknown publisher", because the certificate is self-signed and its root is not trusted. That is expected and does not mean the signature is missing. To make it trusted, import assets/WinGetStudio-codesign.cer (public certificate, no private key) into Trusted Root Certification Authorities.

Under the hood
The single 744-line script became an entry point plus one module per concern under src\modules. The exe is still a single file: the build concatenates the modules at compile time, while running from source dot-sources them from disk, so a module can be edited without recompiling.

The test suite exercises the real thing where it matters — a real winget search, a real package list, the full pin cycle (removed afterwards), a real export — plus checks only a machine can do reliably: that the concatenated exe source keeps every function, that the modules actually see the controls, and that every icon glyph exists in both system fonts.