Fix Windows release build (#97)

Signed builds were not including free-threaded binaries in the installer
Nuget packages need to be signed separately, not by wildcard

Author: zooba

windows-release/sign-nuget-files.yml

@@ -19,11 +19,13 @@ steps:
       } else {
         $files = (gi ${{ parameters.Include }})
       }
-      NuGetKeyVaultSignTool sign -kvu '$(KeyVaultUri)' `
-                    -kvi '$(KeyVaultApplication)' -kvt '$(KeyVaultDirectory)' -kvs '$(KeyVaultSecret)' `
-                    -tr http://timestamp.digicert.com/ -td sha256 `
-                    -kvc '${{ parameters.SigningCertificate }}' -fd sha256 `
-                    $files
+      $files | %{
+        NuGetKeyVaultSignTool sign -kvu '$(KeyVaultUri)' `
+          -kvi '$(KeyVaultApplication)' -kvt '$(KeyVaultDirectory)' -kvs '$(KeyVaultSecret)' `
+          -tr http://timestamp.digicert.com/ -td sha256 `
+          -kvc '${{ parameters.SigningCertificate }}' -fd sha256 `
+          $_
+      }
     displayName: 'Sign binaries'
     retryCountOnTaskFailure: 3
     workingDirectory: ${{ parameters.WorkingDir }}

windows-release/stage-msi.yml

@@ -27,6 +27,7 @@ jobs:
     - template: msi-steps.yml
       parameters:
         ARM64TclTk: ${{ parameters.ARM64TclTk }}
+        DoFreethreaded: ${{ parameters.DoFreethreaded }}
         SigningCertificate: ${{ parameters.SigningCertificate }}
 
 

windows-release/stage-test-msi.yml

@@ -86,7 +86,13 @@ jobs:
     - powershell: |
         $p = (gci "$(Build.BinariesDirectory)\Python\python3*t.exe" | select -First 1)
         Write-Host "Found $p"
-        & $p -c "import sys; print(sys.version)"
+        if (-not $p) {
+            Write-Host "Did not find python3*t.exe in:"
+            dir "$(Build.BinariesDirectory)\Python"
+            throw "Free-threaded binaries were not installed"
+        } else {
+            & $p -c "import sys; print(sys.version)"
+        }
       displayName: 'Collect free-threaded version number'
       condition: and(succeeded(), not(variables['SkipTests']))