release: v0.9.11 - integrate installer signing and updates

Author: Soddentrough

.github/workflows/macos.yml

@@ -129,6 +129,14 @@ jobs:
             "RustTracker-MacOS-Installer.dmg" \
             "RustTracker.app"
 
+      - name: Codesign DMG
+        env:
+          MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }}
+        if: ${{ env.MACOS_CERTIFICATE != '' }}
+        run: |
+          echo "Signing the DMG container..."
+          codesign --force --sign "Developer ID Application" RustTracker-MacOS-Installer.dmg
+
       - name: Notarize DMG
         env:
           APPLE_ID: ${{ secrets.APPLE_ID }}

.github/workflows/windows-build.yml

@@ -54,11 +54,54 @@ jobs:
         VERSION=$(grep -m 1 '^version' Cargo.toml | cut -d '"' -f 2)
         echo "VERSION=$VERSION" >> $GITHUB_ENV
         
+    - name: Sign Executable
+      shell: pwsh
+      env:
+        AZURE_CLIENT_ID: ${{ secrets.AZURE_SIGNING_CLIENT_ID }}
+        AZURE_CLIENT_SECRET: ${{ secrets.AZURE_SIGNING_CLIENT_SECRET }}
+        AZURE_TENANT_ID: ${{ secrets.AZURE_SIGNING_TENANT_ID }}
+        VAULT_URL: ${{ secrets.AZURE_SIGNING_VAULT_URL }}
+        CERT_NAME: ${{ secrets.AZURE_SIGNING_CERT_NAME }}
+      if: ${{ secrets.AZURE_SIGNING_CLIENT_ID != '' }}
+      run: |
+        dotnet tool install --global AzureSignTool
+        azuresigntool sign `
+          -kvu "$env:VAULT_URL" `
+          -kvi "$env:AZURE_CLIENT_ID" `
+          -kvs "$env:AZURE_CLIENT_SECRET" `
+          -kct "$env:AZURE_TENANT_ID" `
+          -kco "$env:CERT_NAME" `
+          -tr http://timestamp.digicert.com `
+          -td sha256 `
+          -fd sha256 `
+          release/rusttracker.exe
+
     - name: Build Installer
       shell: cmd
       run: |
         "C:\Program Files (x86)\Inno Setup 6\ISCC.exe" "/DMyAppVersion=%VERSION%" installer.iss
-        
+
+    - name: Sign Installer
+      shell: pwsh
+      env:
+        AZURE_CLIENT_ID: ${{ secrets.AZURE_SIGNING_CLIENT_ID }}
+        AZURE_CLIENT_SECRET: ${{ secrets.AZURE_SIGNING_CLIENT_SECRET }}
+        AZURE_TENANT_ID: ${{ secrets.AZURE_SIGNING_TENANT_ID }}
+        VAULT_URL: ${{ secrets.AZURE_SIGNING_VAULT_URL }}
+        CERT_NAME: ${{ secrets.AZURE_SIGNING_CERT_NAME }}
+      if: ${{ secrets.AZURE_SIGNING_CLIENT_ID != '' }}
+      run: |
+        azuresigntool sign `
+          -kvu "$env:VAULT_URL" `
+          -kvi "$env:AZURE_CLIENT_ID" `
+          -kvs "$env:AZURE_CLIENT_SECRET" `
+          -kct "$env:AZURE_TENANT_ID" `
+          -kco "$env:CERT_NAME" `
+          -tr http://timestamp.digicert.com `
+          -td sha256 `
+          -fd sha256 `
+          setup/RustTracker-Setup.exe
+          
     - name: Upload Artifact
       uses: actions/upload-artifact@v5
       with:

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "rusttracker"
-version = "0.9.10"
+version = "0.9.11"
 edition = "2024"
 default-run = "rusttracker"
 description = "High-Performance Vulkan Tracker Module Visualizer"

Cargo.toml

@@ -43,3 +43,11 @@ Once the native 3D pipeline is established, the first 3D visualizer will be base
 *   **Asset Pipeline:** Requires integrating a loader (e.g., the `gltf` or `blend-rs` crate) to import the 3D object data and material properties into our new `wgpu` vertex buffers.
 *   **Lighting Strategy:** Instead of full hardware raytracing (which is too computationally intense for 120Hz on lower-end hardware), we will use standard 3D rasterization with dynamic point/spot lights linked to the `AudioUniforms` data.
 *   **Remaining Concerns:** Binary file size bloat from embedding 3D assets will need to be actively managed by optimizing model exports.
+
+## Future Target: Vaporwave Fountain Visualizer
+
+**Feature Request:**
+Implement a Vaporwave Fountain visualizer.
+*   **Concept:** A retro 3D fountain utilizing instanced particles for water droplets, with water jets that spray and change height/angle dynamically in reaction to audio frequencies.
+*   **Styling:** A classic Black & White (B&W) film tone.
+*   **Concerns:** Achieving an authentic B&W film look (film grain, bloom, vignette, proper contrast curves) alongside high-performance instanced particle updates on the GPU can be challenging and will require careful optimization.