From 81631888e9482d88de5581769c2e03dea1e73222 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 9 Oct 2026 10:06:32 -0300
Subject: [PATCH] chore(deps): update rust crate minisign-verify to 0.3 (#3658)

* chore(deps): update rust crate minisign-verify to 0.3

* chore(deps): update rust crate minisign-verify to 0.3

* change file

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Lucas Nogueira <lucas@tauri.app>
---
 .changes/updater-minisign-verify-0.3.md |  6 ++++++
 Cargo.lock                              | 10 ++++++++--
 plugins/updater/Cargo.toml              |  2 +-
 3 files changed, 15 insertions(+), 3 deletions(-)
 create mode 100644 .changes/updater-minisign-verify-0.3.md

diff --git a/.changes/updater-minisign-verify-0.3.md b/.changes/updater-minisign-verify-0.3.md
new file mode 100644
index 000000000..351ebba30
--- /dev/null
+++ b/.changes/updater-minisign-verify-0.3.md
@@ -0,0 +1,6 @@
+---
+"updater": patch
+"updater-js": patch
+---
+
+Update `minisign-verify` to 0.3, which rejects signatures with a non-canonical Ed25519 `S` value. The `Error::Minisign` variant now wraps `minisign_verify` 0.3's `Error`, and its message reads like "The signature verification failed" instead of the variant name (`InvalidSignature`).
diff --git a/Cargo.lock b/Cargo.lock
index 9c2e6c7ce..d350f6938 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3558,7 +3558,7 @@ dependencies = [
  "cc",
  "libc",
  "libflate",
- "minisign-verify",
+ "minisign-verify 0.2.3",
  "pkg-config",
  "tar",
  "ureq",
@@ -3722,6 +3722,12 @@ version = "0.2.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6367d84fb54d4242af283086402907277715b8fe46976963af5ebf173f8efba3"
 
+[[package]]
+name = "minisign-verify"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "871285dc19d8d0ebe0eef3d0e99a205f2a71363b122632cbbfa4a6c370a960ce"
+
 [[package]]
 name = "miniz_oxide"
 version = "0.8.8"
@@ -7108,7 +7114,7 @@ dependencies = [
  "infer",
  "libc",
  "log",
- "minisign-verify",
+ "minisign-verify 0.3.0",
  "osakit",
  "percent-encoding",
  "reqwest 0.13.1",
diff --git a/plugins/updater/Cargo.toml b/plugins/updater/Cargo.toml
index ef5b2d0a6..1e0285e7c 100644
--- a/plugins/updater/Cargo.toml
+++ b/plugins/updater/Cargo.toml
@@ -50,7 +50,7 @@ rustls = { version = "0.23", default-features = false, features = [
 ], optional = true }
 url = { workspace = true }
 http = "1"
-minisign-verify = "0.2"
+minisign-verify = "0.3"
 time = { version = "0.3", features = ["parsing", "formatting"] }
 base64 = "0.22"
 semver = { version = "1", features = ["serde"] }