Auto-Upgrade - oh-my-posh.ee not signed - AppLocker/WDAC Problem

[SebCT]

Code of Conduct

• [X] I agree to follow this project's Code of Conduct

What happened?

After upgrading from Oh My Posh 21.21.1.0 to 21.21.2.0, the oh-my-posh.exe in "AppData\Local\Programs\oh-my-posh\bin" is not signed - the previous version gets renamed in oh-my-posh.exe.old, which is still signed.

You can see that the exe has no code signing if you right-click on it:

Here the previous version which will be renamed in .old, still has the valid code signing certificate:

If i install the install-amd64.exe from 21.21.2.0, everything is fine and the oh-my-posh.exe is perfectly code signed.

I know that the auto-upgrade worked some time before without that issue (exe was still signed), so i hope this issue can be corrected? The Auto-Upgrade function is very nice and if code stays signed it works with AppLocker and WDAC just like the installer.

Thanks in advance.

Theme

powerlevel10k_rainbow.omp.json

What OS are you seeing the problem on?

Windows

Which shell are you using?

powershell

Log output

Doesn't work, because the new updated exe isn't signed anymore, so Application allowlisting like AppLocker or WDAC blocks it.