wip

js/desktop/forge.config.ts

@@ -6,6 +6,7 @@ import { MakerRpm } from '@electron-forge/maker-rpm';
 import { VitePlugin } from '@electron-forge/plugin-vite';
 import { FusesPlugin } from '@electron-forge/plugin-fuses';
 import { FuseV1Options, FuseVersion } from '@electron/fuses';
+import type { SignToolOptions } from '@electron/windows-sign';
 
 // Windows code signing via Azure Trusted Signing. Dormant unless the workflow
 // provisions the dlib + metadata file and exports these env vars, so local
@@ -16,7 +17,7 @@ import { FuseV1Options, FuseVersion } from '@electron/fuses';
 const windowsSign = process.env.AZURE_METADATA_JSON_PATH ? {
   debug: true,
   signToolPath: process.env.SIGNTOOL_PATH,
-  hashes: ['sha256' as any],
+  hashes: ['sha256'] as SignToolOptions['hashes'],
   timestampServer: 'http://timestamp.acs.microsoft.com',
   signWithParams: [
     '/v',