From c14685311bf4d19f6ab879410c232cb477edf1f7 Mon Sep 17 00:00:00 2001
From: Kaleb Luedtke <trenlymc@gmail.com>
Date: Sat, 23 May 2026 09:33:14 -0500
Subject: [PATCH] =?UTF-8?q?ci=EF=BC=9A=E8=AF=B7=E4=BD=BF=E7=94=A8=20winget?=
 =?UTF-8?q?create=20=E4=BB=A3=E6=9B=BF=20winget-releaser=20(#16813)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix: Use wingetcreate instead of winget-releaser

* fix: Pin to a version and hash

* fix: Specify to use PowerShell

* fix: Use GitHub API for fetching the download URLs

* fix: Don't set GITHUB_TOKEN

* fix: Trim leading character from version

* fix: Anchor regex for safety

* chore: Use newer API version

* fix: Ensure terminating errors terminate
---
 .../release-package-distribution.yml          | 53 +++++++++++++++----
 1 file changed, 44 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/release-package-distribution.yml b/.github/workflows/release-package-distribution.yml
index b1ecbbfa34..b4b506cc0e 100644
--- a/.github/workflows/release-package-distribution.yml
+++ b/.github/workflows/release-package-distribution.yml
@@ -113,18 +113,53 @@ jobs:
 
     env:
       RELEASE_TAG: ${{ needs.meta.outputs.RELEASE_TAG }}
+      WINGET_CREATE_GITHUB_TOKEN: ${{ secrets.MAABOT_WINGET_TOKEN }}
+      WINGET_CREATE_VERSION: 'v1.12.8.0'
+      WINGET_CREATE_SHA256: '8BD738851B524885410112678E3771B341C5C716DE60FBBECB88AB0A363ED85D'
 
     steps:
       - name: Upload MAA to WinGet
-        uses: vedantmgoyal9/winget-releaser@main
-        with:
-          identifier: MaaAssistantArknights.MaaAssistantArknights
-          version: ""
-          installers-regex: "-win-"
-          max-versions-to-keep: 0
-          release-tag: ${{ env.RELEASE_TAG }}
-          fork-user: MaaAssistantArknights
-          token: ${{ secrets.MAABOT_WINGET_TOKEN }}
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'
+          $RELEASE_TAG = "${{ env.RELEASE_TAG }}"
+
+          # Fetch the release assets from GitHub Releases API and resolve actual download URLs
+          $headers = @{
+            Accept                 = "application/vnd.github+json"
+            "X-GitHub-Api-Version" = "2026-03-10"
+          }
+
+          if ($env:WINGET_CREATE_GITHUB_TOKEN) {
+            $headers.Authorization = "Bearer $env:WINGET_CREATE_GITHUB_TOKEN"
+          }
+
+          $release = Invoke-RestMethod `
+            -Uri "https://api.github.com/repos/MaaAssistantArknights/MaaAssistantArknights/releases/tags/$RELEASE_TAG" `
+            -Headers $headers
+
+          $URL_x64 = $release.assets | Where-Object { $_.name -match "-win-x64.zip$" } | Select-Object -First 1 -ExpandProperty browser_download_url
+          $URL_arm64 = $release.assets | Where-Object { $_.name -match "-win-arm64.zip$" } | Select-Object -First 1 -ExpandProperty browser_download_url
+
+          if (-not $URL_x64 -or -not $URL_arm64) {
+            Write-Error "Failed to resolve release assets from GitHub API for tag '$RELEASE_TAG'."
+            exit 1
+          }
+
+          # Download winget-create
+          curl.exe -JLO "https://github.com/microsoft/winget-create/releases/download/$env:WINGET_CREATE_VERSION/wingetcreate.exe"
+
+          # Verify the hash of wingetcreate.exe
+          if ((Get-FileHash wingetcreate.exe).Hash -ne $env:WINGET_CREATE_SHA256) {
+            Write-Error "wingetcreate.exe hash does not match expected value. Aborting."
+            exit 1
+          }
+
+          # Update the package using wingetcreate
+          .\wingetcreate.exe update MaaAssistantArknights.MaaAssistantArknights `
+            --version $RELEASE_TAG.TrimStart('v') `
+            --urls "$URL_x64|x64" "$URL_arm64|arm64" `
+            --submit
 
   maa_cos:
     name: Upload to MAA COS