A patch release whose only substantive change is that the installer and the portable launcher are signed.
What was wrong
On v3.6.0 and v3.7.0 the app payload was signed but the portable launcher stub, Update.exe and Setup.exe were not — so the file a user double-clicks in the portable zip was a 399 kB unsigned launcher rather than the signed app, which is exactly what an "unknown publisher" policy blocks.
Velopack creates those three during packing, so no pre-pack signing round reaches them. They are now signed by a separate step after packing and written back over the standalone assets — Setup.exe, and the root launcher and Update.exe inside Portable.zip. Neither of those carries a recorded hash, so rewriting them invalidates nothing: releases.<channel>.json records a SHA256 and Size for the two .nupkg files and nothing else. The portable zip is rebuilt member by member with every unchanged entry's local header, name and raw compressed bytes copied verbatim, and verified against a snapshot of the original before it replaces it.
A release-time guard now walks every published executable, including the ones inside the zips and packages, and refuses to publish an unsigned one.
What is still unsigned, and why
Two executables inside the .nupkg only: lib/app/<App>_ExecutionStub.exe and lib/app/Squirrel.exe. That package's bytes are what the updater verifies and what delta packages patch against, so re-signing its members would break updates.
Their deployed copies in Portable.zip are signed. The copies Setup.exe lays down are not, so after installing, the shortcut target and the updater remain unsigned. The guard exempts exactly those two, keyed on the container as well as the member path, so the same filenames anywhere else still fail.
What is NOT in this release
Cut from the v3.7.0 tag, not from the development branch: no application code, no database schema change, and none of the unreleased work queued for the next feature release. Upgrading from 3.7.0 changes no behaviour and migrates no data.
Published as a pre-release; 3.7.0 remains the current release.