Merge pull request #14: commit the strong-name key

Key.snk is tracked so every build has the same assembly identity.

Author: Darkseal

.github/workflows/release.yml

@@ -21,8 +21,6 @@ jobs:
     runs-on: windows-latest
     outputs:
       version: ${{ steps.version.outputs.version }}
-    env:
-      SNK_BASE64: ${{ secrets.SNK_BASE64 }}
     steps:
       - uses: actions/checkout@v7
 
@@ -43,11 +41,6 @@ jobs:
           if (-not (Select-String -Path 'CHANGELOG.txt' -SimpleMatch "SourceControlSwitcher - v$version" -Quiet)) { throw "CHANGELOG.txt has no section for v$version" }
           "version=$version" >> $env:GITHUB_OUTPUT
 
-      - name: Restore strong-name key
-        if: env.SNK_BASE64 != ''
-        shell: pwsh
-        run: '[IO.File]::WriteAllBytes("$PWD/Key.snk", [Convert]::FromBase64String($env:SNK_BASE64))'
-
       - name: Build
         run: msbuild SourceControlSwitcher.slnx -restore -p:Configuration=Release -p:DeployExtension=false -v:minimal
 

.gitignore

@@ -6,7 +6,6 @@
 
 development/
 dist/*
-Key.snk
 
 
 # User-specific files

BUILD.txt

@@ -15,7 +15,8 @@ Open SourceControlSwitcher.slnx and build (Ctrl+Shift+B), or from a Developer Co
 
 The VSIX is written to target\Release\SourceControlSwitcher.vsix.
 
-Key.snk (the strong-name key) is not in the repository: a local one is generated on the first build.
+Key.snk is the strong-name key of the assembly. It is committed on purpose, as Microsoft recommends for
+open-source projects: a strong name provides identity, not security.
 
 Tests
 -----

CHANGELOG.txt

@@ -17,7 +17,8 @@ SourceControlSwitcher - v1.2.0
     VisualHG, VSHG, HgSccPackage (Mercurial support).
   * Solution migrated to .slnx; unit tests added.
   * Icon redrawn from the vector logo; Getting Started link in the extension details.
-  * Extension description localized in Italian, French and German (shown in Manage Extensions). Builds, tests and releases now run
+  * Extension description localized in Italian, French and German (shown in Manage Extensions).
+  * The strong-name key (Key.snk) is now in the repository, so every build has the same assembly identity. Builds, tests and releases now run
     on GitHub Actions (CI on every push and pull request; tag vX.Y.Z publishes to the Marketplace).
 
 SourceControlSwitcher - v1.1.2

Key.snk

@@ -142,8 +142,4 @@
   </ItemGroup>
   <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
   <Import Project="$(VSToolsPath)\VSSDK\Microsoft.VsSDK.targets" Condition="'$(VSToolsPath)' != ''" />
-  <!-- Key.snk is not committed: generate a local one when missing, wherever the project is built from. -->
-  <Target Name="EnsureStrongNameKey" BeforeTargets="BeforeBuild" Condition="!Exists('$(MSBuildProjectDirectory)\..\Key.snk')">
-    <Exec Command="&quot;$(TargetFrameworkSDKToolsDirectory)sn.exe&quot; -k &quot;$(MSBuildProjectDirectory)\..\Key.snk&quot;" />
-  </Target>
 </Project>