From 0bcac5e387f5886b9b5a641608efc4a26a422786 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Karol=20S=C3=B3jko?= <karolsojko@gmail.com>
Date: Wed, 15 Oct 2025 15:30:59 +0200
Subject: [PATCH] chore: fix signing algorithms (#2944)

---
 .github/workflows/desktop.release.reuse.yml | 2 +-
 packages/desktop/package.json               | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/desktop.release.reuse.yml b/.github/workflows/desktop.release.reuse.yml
index fd1aff492..36ecb683f 100644
--- a/.github/workflows/desktop.release.reuse.yml
+++ b/.github/workflows/desktop.release.reuse.yml
@@ -326,7 +326,7 @@ jobs:
 
       - name: Certificates Sync
         run: |
-          smctl windows certsync
+          smctl windows certsync --keypair-alias=${{ secrets.SM_KEYPAIR_ALIAS }}
         shell: cmd
 
       - name: Health Check Signing Manager
diff --git a/packages/desktop/package.json b/packages/desktop/package.json
index ae83f656d..31bc61b31 100644
--- a/packages/desktop/package.json
+++ b/packages/desktop/package.json
@@ -123,7 +123,8 @@
       "certificateSubjectName": "Standard Notes Ltd.",
       "publisherName": "Standard Notes Ltd.",
       "signDlls": true,
-      "sign": "./scripts/windowsSign.js"
+      "sign": "./scripts/windowsSign.js",
+      "signingHashAlgorithms": ["sha1", "sha256"]
     },
     "nsis": {
       "deleteAppDataOnUninstall": true