From de4fa8c7b0281d4486046c38d32f0baf435cf012 Mon Sep 17 00:00:00 2001
From: Armin Schrenk <armin.schrenk@skymatic.de>
Date: Wed, 27 Mar 2024 12:20:18 +0100
Subject: [PATCH] use latest WiX version

fixes CVE-2024-29187 and CVE-2024-29188
---
 .github/workflows/win-exe.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/win-exe.yml b/.github/workflows/win-exe.yml
index d3720c76b..b869a5857 100644
--- a/.github/workflows/win-exe.yml
+++ b/.github/workflows/win-exe.yml
@@ -40,6 +40,9 @@ jobs:
       LOOPBACK_ALIAS: 'cryptomator-vault'
       WIN_CONSOLE_FLAG: ''
     steps:
+      - name: Upgrade WIX to latest version
+        run: choco install wixtoolset --version 3.14.1
+        shell: pwsh
       - uses: actions/checkout@v4
       - name: Setup Java
         uses: actions/setup-java@v4