From 1002fe9feb13a43af753c1903475590cdab257c3 Mon Sep 17 00:00:00 2001
From: Patrik Svensson <patrik@patriksvensson.se>
Date: Tue, 9 Dec 2025 02:55:27 +0100
Subject: [PATCH] Re-enable code signing (hopefully it works this time)

---
 .github/workflows/ci.yaml      |  2 +-
 .github/workflows/publish.yaml | 13 ++++++++++---
 2 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index aea13b83..c9d80aeb 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 5a8ad1bf..42ac91b4 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -27,10 +27,17 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
+      - name: Azure login
+        uses: azure/login@v2
+        with:
+          client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+
       - name: Setup .NET SDK (net8.0, net9.0)
         uses: actions/setup-dotnet@v5
         with:
@@ -45,7 +52,7 @@ jobs:
         shell: bash
         run: |
           dotnet tool restore
-          dotnet make publish \
+          dotnet make publish --sign \
             --nuget-key="${{secrets.NUGET_API_KEY}}" \
             --keyvaultUrl="${{secrets.SIGN_KEYVAULT_URL}}" \
             --keyvaultCertificate="${{secrets.SIGN_KEYVAULT_CERTIFICATE}}"
@@ -60,7 +67,7 @@ jobs:
     runs-on: windows-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
       with:
         fetch-depth: 0