FileHasher v0.3.0

Added

• Signed MSI installer deliverable, built for distribution via winget (winget install FSPProductions.FileHasher) and usable standalone. New WiX authoring in installer/FileHasher.wxs: per-machine install to Program Files\FileHasher, Start Menu shortcut, Add/Remove Programs entry with icon, clean major-upgrade between versions. Two new pipeline stages implement the required signing order across the two runners — package-msi (Windows) wraps the already-signed exe in the MSI with the WiX 5.x toolset and runs full ICE validation, then sign-msi (Linux signer) Authenticode-signs the MSI itself (WiX only runs on Windows; the HSM only lives on the signer). The MSI and its .sha256 sidecar join the existing four release assets on both the GitLab Release and the GitHub mirror (six assets total). New winget/ folder documents the Windows-side submission workflow to microsoft/winget-pkgs (wingetcreate) with reviewable manifest templates. Windows runner gains a one-time prerequisite: the wix dotnet global tool, pinned to 5.x to avoid the v6+ OSMF EULA gate (see ci/README.md).

Changed

• Linux signer host: retired the pre-2.2 custom osslsigncode build (couldn't sign MSI — built without libgsf) in favor of the distro's 2.8, symlinked at the pipeline's stable /usr/local/bin/osslsigncode path, and replaced the stock noble libp11 0.4.12 PKCS#11 engine (segfaults osslsigncode HSM signing with OpenSSL 3.0.13 — Ubuntu bug 2119094) with 0.4.20 built from source, with the distro package apt-mark held. Setup steps 4/4b/4c in ci/README.md document the new stack for a from-scratch rebuild.

FileHasher v0.2.1

Changed

• Re-publish of v0.2.0 under a fresh tag. v0.2.0's tag name was permanently reserved on the GitHub mirror by GitHub's Immutable Releases policy during a history-signing cleanup, blocking the GitLab → GitHub mirror push for that one ref. v0.2.1 has no functional changes from v0.2.0; the source tree differs only in <Version> (0.2.0 → 0.2.1) and this CHANGELOG entry.