Validation-Executable-Error: Squirrel (Update.exe / squirrel.exe) and app exe exit -1 during WinGetSvc validation (PhraseVault)

[ptmrio]

Problem

My submission PR fails repo validation with Validation-Executable-Error even though the installer works locally.

PR: #319203
Pipeline: WinGetSvc-Validation-122-319203-20251215-1
Validator build: 1184

Failure output:
Executable C:\Users\Validator\AppData\Local\PhraseVault\Update.exe returned exit code: -1
Executable C:\Users\Validator\AppData\Local\PhraseVault\PhraseVault.exe returned exit code: -1
Executable C:\Users\Validator\AppData\Local\PhraseVault\app-2.2.2\squirrel.exe returned exit code: -1
(0xFFFFFFFF / 4294967295 / “Cancel”)

Package / installer details

• App: PhraseVault
• Tech: Electron Forge + Squirrel.Windows (creates PhraseVault.exe + Update.exe + squirrel.exe)
• Signed: Certum code signing cert

Local verification

• Clean Win11 Hyper-V VM: install works; app runs.
• SmartScreen no longer appears when installing/running locally.
• winget validate + winget install --manifest works locally.

Suspected cause

Initially thought it was blocked by SmartScreen due to change to Squirrel Installer and new Certificate
Repo validation appears to execute installed EXEs directly (without args / without interactive UI context).
Squirrel helper binaries (Update.exe / squirrel.exe) and/or the app stub may return -1 when launched this way.

Ask

1. Is this a known/expected false-positive for Squirrel/Electron packages in WinGetSvc validation?
2. What is the recommended way to get Squirrel-based packages through validation?
   • Ignore Squirrel helper EXEs during validation?
   • Invoke with specific args (e.g. --help/--version) instead of bare execution?
   • Other manifest metadata that avoids probing these binaries?
3. If you need extra diagnostics from me, tell me what to capture and where to paste it.

[UnownPlain]

Squirrel is unmaintained and doesn't work well with WinGet due to Squirrel/Squirrel.Windows#1187. I would highly recommend building your installer with something else.

The error from the pipeline you're getting is due to some of the EXEs returning a non-zero exit code. This usually happens with CLI applications when invoked with no arguments. An admin will remove the label if the package works correctly.

[ptmrio]

Thank you for the insight. ElectronForge is the official best practice for building electron apps and Squirrel is the official best practice maker for ElectronForge.

So it's a bad timing situation 😬😅

Velopack might replace it though.

Out of curiosity, what will be the process for publishing some minor updates like 2.2.3 of my application? I can't switch installers that fast, but I would need to publish small improvements. Do I need to open an issue each time or simply wait on the pull request?

[UnownPlain]

No issue is needed. Just open a PR with the new version.