5.4.0

Fixed

• Fixed UpdateSelf and dependency version checks that compared versions as strings. Updates and newer dependencies were missed once a version component reached two digits.
• Fixed dependencies on Windows Server 2019 and 2022 being reported as installed and skipped when they were not installed. This is a likely cause of the recurring 0x80073CF3 prerequisite errors.
• Fixed -PortableInstallMethod also running the standard install and registration on Windows 10 and 11.
• Fixed PATH handling. Entries such as %LOCALAPPDATA%\Microsoft\WindowsApps are now stored as REG_EXPAND_SZ so Windows expands them, and existing %USERPROFILE% style entries are no longer flattened to fixed paths. Repeated runs no longer add duplicate PATH entries.
• Removed the GitHub token from -Debug and -Verbose output.

Security

• Portable extraction now refuses archive entries that would land outside the destination folder.
• Package manifests are parsed with DTD processing disabled.

Added

• Help entries for -AlternateInstallMethod, -PortableInstallMethod, and -WingetVersion.
• Pester test suite under tests/. Run with Invoke-Pester -Path .\tests.

Changed

• Releases are no longer code signed. The certificate expired and renewing it was no longer justified, as the PowerShell Gallery and irm | iex methods remain unaffected. If you download the script and run it locally, run Unblock-File on it first or launch it with -ExecutionPolicy Bypass.
• README now documents all three install methods and when each is used automatically.

Full Changelog: 5.3.8...5.4.0