From 0b272838dfd5cd64ec85436202cec4d3e0554b59 Mon Sep 17 00:00:00 2001
From: Breadway <plasticbread849@gmail.com>
Date: Tue, 21 Jul 2026 19:11:15 +0800
Subject: [PATCH] gen-index.sh: exclude .minisig sidecar files from the
 binaries list
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed release binaries ship a bakery-x86_64.minisig alongside the
binary. The binaries-collection loop already filtered out .sha256/
.toml/.service/.css/.txt sidecars but not .minisig, so the signature
file itself got listed as an installable binary with no sha256 —
bakery then refused to install it (checksum mismatch) whenever it
tried to update a package with a signed binary.
---
 scripts/gen-index.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/scripts/gen-index.sh b/scripts/gen-index.sh
index 9991adb..2b7a4d8 100755
--- a/scripts/gen-index.sh
+++ b/scripts/gen-index.sh
@@ -56,6 +56,7 @@ build_package_json() {
         [[ "${bin_path}" == *.service ]] && continue
         [[ "${bin_path}" == *.css ]]     && continue
         [[ "${bin_path}" == *.txt ]]     && continue
+        [[ "${bin_path}" == *.minisig ]] && continue
         [[ -f "${bin_path}" ]] || continue
         local bin_name
         bin_name="$(basename "${bin_path}")"