From 243da39fe340f7b85e1e61f808ea8de1fa870b2f Mon Sep 17 00:00:00 2001
From: Hein <hein@bitechsystems.co.za>
Date: Wed, 8 Apr 2026 15:29:21 +0200
Subject: [PATCH] chore(release): update AUR SSH setup to use base64 decoding

---
 .gitea/workflows/release.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index 7f428e8..3d2aecb 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -105,9 +105,9 @@ jobs:
           VERSION="${{ github.event.inputs.tag || github.ref_name }}"
           PKGVER="${VERSION#v}"
 
-          # Setup SSH for AUR (printf + tr strips Windows line endings that break libcrypto)
+          # Setup SSH for AUR (key is stored base64-encoded to avoid newline mangling in secrets)
           mkdir -p ~/.ssh
-          printf '%s\n' "$AUR_SSH_KEY" | tr -d '\r' > ~/.ssh/aur
+          echo "$AUR_SSH_KEY" | base64 -d > ~/.ssh/aur
           chmod 600 ~/.ssh/aur
           ssh-keyscan aur.archlinux.org >> ~/.ssh/known_hosts