ci: automatically upload published clients to winget

[thomaseizinger]

This utilizes the https://github.com/vedantmgoyal9/winget-releaser action to automatically submit a PR to the winget repository every time we publish a new version of the GUI / Headless Client.

The bot uses the initial manifest added in microsoft/winget-pkgs#259366 and updates the installer link and hash.

Resolves: #4729

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
firezone	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 26, 2025 10:41pm

[Copilot]

Pull Request Overview

This PR automates publishing newly released GUI and headless clients to the Windows Package Manager (winget) and updates the changelogs to advertise the new install option.

• Adds winget install entries under the Unreleased section for both GUI and headless changelogs on Windows.
• Introduces a GitHub Actions workflow that triggers on new published releases of GUI and headless clients to submit updates to the winget repository.

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
website/src/components/Changelog/Headless.tsx	Added Windows-only Unreleased changelog entry linking to winget
website/src/components/Changelog/GUI.tsx	Populated Unreleased section with winget install instruction
.github/workflows/publish-to-winget.yml	New CI workflow to publish both clients to winget on release

Comments suppressed due to low confidence (2)

.github/workflows/publish-to-winget.yml:11

• The startsWith function’s second argument must be a string literal. Wrap gui-client in quotes so it reads startsWith(github.event.release.name, 'gui-client').

if: ${{ startsWith(github.event.release.name, gui-client) }}

.github/workflows/publish-to-winget.yml:29

• Similarly, headless-client needs to be quoted: startsWith(github.event.release.name, 'headless-client'), otherwise the condition will always fail.

if: ${{ startsWith(github.event.release.name, headless-client) }}

[thomaseizinger]

@jamilbk This stuff is a bit difficult to test because we only trigger this on release. I think I've set it all up correctly but we ultimately will only know on the next release.

[jamilbk]

Hope that action is legit

[thomaseizinger]

@jamilbk Changelog entries have been moved to the previous version because that is the version that is already published.

[jamilbk]

Hm, is the icon up to us to implement or is winget supposed to pick it up automagically?

[thomaseizinger]

Hm, is the icon up to us to implement or is winget supposed to pick it up automagically?

That is probably up to us actually, I didn't read the manifest docs in great detail.

[thomaseizinger]

I thought this was a CLI only thing so didn't even think we could set an icon.