microsoft / microsoft/winget-pkgs

Validation-Executable-Error: Squirrel (Update.exe / squirrel.exe) and app exe exit -1 during WinGetSvc validation (PhraseVault)

Open
#323,262 5 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Issue-Bug
Dominant language
No language data
Stars
11.1k
Forks
9.7k
Avg merge
1h 32m
Merged PRs (30d)
616

Description

### Problem
My submission PR fails repo validation with Validation-Executable-Error even though the installer works locally.

PR: https://github.com/microsoft/winget-pkgs/pull/319203
Pipeline: WinGetSvc-Validation-122-319203-20251215-1
Validator build: 1184

Failure output:
Executable C:\Users\Validator\AppData\Local\PhraseVault\Update.exe returned exit code: -1
Executable C:\Users\Validator\AppData\Local\PhraseVault\PhraseVault.exe returned exit code: -1
Executable C:\Users\Validator\AppData\Local\PhraseVault\app-2.2.2\squirrel.exe returned exit code: -1
(0xFFFFFFFF / 4294967295 / “Cancel”)

### Package / installer details
- App: PhraseVault
- Tech: Electron Forge + Squirrel.Windows (creates PhraseVault.exe + Update.exe + squirrel.exe)
- Signed: Certum code signing cert

### Local verification
- Clean Win11 Hyper-V VM: install works; app runs.
- SmartScreen no longer appears when installing/running locally.
- winget validate + winget install --manifest works locally.

### Suspected cause
Initially thought it was blocked by SmartScreen due to change to Squirrel Installer and new Certificate
Repo validation appears to execute installed EXEs directly (without args / without interactive UI context).
Squirrel helper binaries (Update.exe / squirrel.exe) and/or the app stub may return -1 when launched this way.

### Ask
1) Is this a known/expected false-positive for Squirrel/Electron packages in WinGetSvc validation?
2) What is the recommended way to get Squirrel-based packages through validation?
- Ignore Squirrel helper EXEs during validation?
- Invoke with specific args (e.g. --help/--version) instead of bare execution?
- Other manifest metadata that avoids probing these binaries?
3) If you need extra diagnostics from me, tell me what to capture and where to paste it.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the linked PR #319203 and the WinGetSvc-Validation-122-319203-20251215-1 failure output. Investigate how validation launches PhraseVault.exe, Update.exe, and squirrel.exe, and compare that behavior with the package's Squirrel.Windows layout. Done means establishing whether this is expected validation behavior and identifying an actionable, repository-supported resolution.

Written by the indexing model from the issue text.

Assessment

Tech stack
electron
Domain
release, testing-qa
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.