pull · Aug 12, 2026 · Aug 12, 2026 · Aug 12, 2026 · Aug 12, 2026 · Aug 12, 2026
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -179,6 +179,8 @@ When you'd like the team to take a look, (even if the work is not yet fully-comp
 > [!IMPORTANT]
 > Remember - **changes you make may affect both the Windows Package Manager and the schema support implemented in our validation pipelines!** Because of this, we will treat community PR's with the same level of scrutiny and rigor as commits submitted to the official Windows source by team members and partners.
 
+When you submit a manifest PR, a **GitHub App** automatically runs the [Validation Pipeline](/doc/Validation.md) on your manifest and installers, reporting results directly on the PR's Checks tab. For details on each step and how to resolve failures, see the [Validation documentation](/doc/Validation.md) and [Validation Failure Guide](/doc/ValidationFailureGuide.md).
+
 ### Merge
 
 Once your code has been reviewed and approved by the requisite number of team members, it will be merged into the main branch. Once merged, your PR will be automatically closed.

diff --git a/doc/Authoring.md b/doc/Authoring.md
@@ -44,7 +44,7 @@ Before creating and submitting a manifest, check if the package already exists:
 
 Review the [Manifest Specification]. If the process seems complex, you can create a new issue and select [Package Request/Submission 👀](https://github.com/microsoft/winget-pkgs/issues/new/choose).
 
-Manifests submitted to this repository should be multi-file manifests. The minimum required files are:
+Manifests submitted to this repository must be multi-file manifests. The minimum required files are:
 - A [version][versionSchema] file
 - A [defaultLocale][defaultLocaleSchema] file
 - An [installer][installerSchema] file
@@ -87,6 +87,8 @@ If you manually edit the YAML, validate your manifest using the following comman
 winget validate --manifest <Path to manifest>
 ```
 
+When you submit a PR, a **GitHub App** automatically runs the [Validation Pipeline](Validation.md) on your manifest and installers, reporting results directly on the PR. For a detailed description of each step and how to resolve failures, see the [Validation](Validation.md) and [Validation Failure Guide](ValidationFailureGuide.md) documents.
+
 ## Testing
 
 Test your manifest before submission to ensure it meets quality standards:

diff --git a/doc/Policies.md b/doc/Policies.md
@@ -25,7 +25,7 @@ Packages submitted to the community repository must install without requiring us
 
 ## Security Scans and Potentially Unwanted Applications (PUA)
 
-All packages submitted to the community repository are subject to multiple security scans as part of the validation pipeline. For more details on these checks, see [How do I know the packages in the Community Repository are safe?](FAQ.md#how-do-i-know-the-packages-in-the-community-repository-are-safe) in the FAQ.
+All packages submitted to the community repository are subject to multiple security scans as part of the validation pipeline. For more details on these checks, see [How do I know the packages in the Community Repository are safe?](FAQ.md#how-do-i-know-the-packages-in-the-community-repository-are-safe) in the FAQ, and the [Validation documentation](Validation.md) for a full description of all 10 validation steps.
 
 Because of the security position this repository is placed in, there is a strict policy against Potentially Unwanted Applications (PUA) and potentially malicious software. If a package is flagged by any of the security scans in the validation pipeline, it cannot be accepted into the repository, regardless of the application's legitimacy or intent. This policy exists to protect users and maintain the integrity of the repository.
 

diff --git a/doc/Validation.md b/doc/Validation.md
diff --git a/doc/ValidationFailureGuide.md b/doc/ValidationFailureGuide.md
@@ -1,14 +1,14 @@
 # WinGet Package Validation: Common Failure Labels and How to Fix Them
 
-When you submit a pull request to [microsoft/winget-pkgs](https://github.com/microsoft/winget-pkgs), automated validation pipelines run a series of checks on your manifest and installers. If something fails, labels are applied to your PR to indicate what went wrong. This document explains each label, what causes it, and how to resolve it.
+When you submit a pull request to [microsoft/winget-pkgs](https://github.com/microsoft/winget-pkgs), a **GitHub App** automatically runs the [Validation Pipeline](Validation.md) on your manifest and installers, reporting results directly on the PR's Checks tab. If something fails, labels are applied to your PR to indicate what went wrong. This document explains each label, what causes it, and how to resolve it.
 
 > [!TIP]
 > Many issues can be caught before submitting by running:
 > ```powershell
 > winget validate --manifest <path-to-manifest>
 > winget install --manifest <path-to-manifest>
 > ```
-> For isolated testing, use the [SandboxTest.ps1](https://github.com/microsoft/winget-pkgs/blob/master/doc/tools/SandboxTest.md) script or Windows Sandbox.
+> For isolated testing, use the [SandboxTest.ps1](tools/SandboxTest.md) script or Windows Sandbox.
 
 ---
 
@@ -40,7 +40,7 @@ These labels track the progress of your PR through the validation pipeline.
 | **Needs-Author-Feedback** | Something needs your attention. If not addressed within 5 days, `No-Recent-Activity` will be added. If there is still no activity after a further 3 days, the PR will be automatically closed. |
 | **Needs-Attention** | The PR has been escalated to the WinGet engineering team for investigation. |
 | **Blocking-Issue** | The PR cannot be approved until the blocking issue (indicated by an accompanying error label) is resolved. |
-| **Needs-CLA** | You have not signed the [Contributor License Agreement](https://cla.opensource.microsoft.com/microsoft/winget-pkgs). The PR cannot be merged until the CLA is signed. |
+| **Needs-CLA** | You have not signed the [Contributor License Agreement](https://cla.opensource.microsoft.com/microsoft/winget-pkgs). The PR cannot be merged until the CLA is signed. This is checked by a separate automated process, independent of the validation pipeline. |
 
 ---
 
@@ -112,12 +112,12 @@ manifests/<first-letter>/<Publisher>/<PackageName>/<PackageVersion>/
 **What it means:** There are inconsistencies or missing values in the manifest discovered during MSIX package evaluation or installer metadata validation.
 
 **Common causes:**
-- `InstallerType` mismatch between what is declared and what is detected
+- `InstallerType` mismatch between what is declared and what is detected (e.g., declaring `exe` for an installer that is actually `portable`)
 - Missing or incorrect `PackageFamilyName` for MSIX packages
 - Incorrect `MinimumOSVersion` for MSIX packages
 - Inconsistencies in `AppsAndFeaturesEntries`
 
-**How to fix:** Verify that installer metadata matches the actual installer. For MSIX, ensure `PackageFamilyName` and `SignatureSha256` are correct.
+**How to fix:** Verify that installer metadata matches the actual installer. For MSIX, ensure `PackageFamilyName` and `SignatureSha256` are correct. Use the [SandboxTest.ps1 script](tools/SandboxTest.md) to inspect the installed state.
 
 ---
 
@@ -292,11 +292,11 @@ Function Get-UrlResponse {
 **How to fix:**
 1. Check that your `InstallerType` is correct — use `nullsoft`, `inno`, `burn`, or `wix` instead of generic `exe` or `msi` when applicable.
 2. Verify your `InstallerSwitches` include the correct `Silent` and `SilentWithProgress` values.
-2. Test locally:
+3. Test locally:
    ```powershell
    winget install --manifest <path-to-manifest>
    ```
-3. Use Windows Sandbox to confirm the install completes without interaction.
+4. Use Windows Sandbox to confirm the install completes without interaction.
 
 ---
 
@@ -506,4 +506,4 @@ These labels are applied by [moderators](https://github.com/microsoft/winget-pkg
 
 ---
 
-*For more information, see the [official validation documentation](https://docs.microsoft.com/windows/package-manager/package/winget-validation).*
+*For more information, see the [Validation Pipeline documentation](Validation.md) and the [Windows Package Manager Policies](https://learn.microsoft.com/windows/package-manager/package/windows-package-manager-policies) on Microsoft Learn. Please also reference the [official validation documentation](https://docs.microsoft.com/windows/package-manager/package/winget-validation).*
diff --git a/manifests/0/0-don/clippy/1.7.3/0-don.clippy.installer.yaml b/manifests/0/0-don/clippy/1.7.3/0-don.clippy.installer.yaml
@@ -0,0 +1,22 @@
+# Created with WinGet Releaser using komac v2.16.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: 0-don.clippy
+PackageVersion: 1.7.3
+InstallerLocale: en-US
+InstallerType: nullsoft
+Scope: user
+UpgradeBehavior: uninstallPrevious
+ProductCode: clippy
+ReleaseDate: 2026-08-11
+AppsAndFeaturesEntries:
+- DisplayName: clippy
+  ProductCode: clippy
+InstallationMetadata:
+  DefaultInstallLocation: '%LocalAppData%\clippy'
+Installers:
+- Architecture: x64
+  InstallerUrl: https://github.com/0-don/clippy/releases/download/v1.7.3/clippy_1.7.3_x64-setup.exe
+  InstallerSha256: DC69D942BD5FFD499D5B15E01C0C268E3CD3408EB40A76211B6F07051779C94B
+ManifestType: installer
+ManifestVersion: 1.12.0
diff --git a/manifests/0/0-don/clippy/1.7.3/0-don.clippy.locale.en-US.yaml b/manifests/0/0-don/clippy/1.7.3/0-don.clippy.locale.en-US.yaml
@@ -0,0 +1,23 @@
+# Created with WinGet Releaser using komac v2.16.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json
+
+PackageIdentifier: 0-don.clippy
+PackageVersion: 1.7.3
+PackageLocale: en-US
+Publisher: 0-don
+PublisherUrl: https://github.com/0-don
+PublisherSupportUrl: https://github.com/0-don/clippy/issues
+PackageName: Clippy
+PackageUrl: https://github.com/0-don/clippy
+License: MIT
+LicenseUrl: https://github.com/0-don/clippy/blob/HEAD/LICENSE
+ShortDescription: Clipboard Manager built with Rust & Typescript
+Description: Privacy focused clipboard manager with sync and encryption. Supports text, images, files, HTML, and RTF content with cloud sync via Google Drive.
+Tags:
+- clipboard
+- clipboard-manager
+- productivity
+- utility
+ReleaseNotesUrl: https://github.com/0-don/clippy/releases/tag/v1.7.3
+ManifestType: defaultLocale
+ManifestVersion: 1.12.0
diff --git a/manifests/0/0-don/clippy/1.7.3/0-don.clippy.yaml b/manifests/0/0-don/clippy/1.7.3/0-don.clippy.yaml
@@ -0,0 +1,8 @@
+# Created with WinGet Releaser using komac v2.16.0
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.version.1.12.0.schema.json
+
+PackageIdentifier: 0-don.clippy
+PackageVersion: 1.7.3
+DefaultLocale: en-US
+ManifestType: version
+ManifestVersion: 1.12.0
diff --git a/manifests/7/7zip/7zip/18.05/7zip.7zip.installer.yaml b/manifests/7/7zip/7zip/18.05/7zip.7zip.installer.yaml
@@ -75,8 +75,7 @@ Installers:
     SilentWithProgress: /S
     InstallLocation: /D="<INSTALLPATH>"
   ProductCode: 7-Zip
-- InstallerLocale: en-US
-  Architecture: x86
+- Architecture: x86
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/18.05/7z1805.msi
   InstallerSha256: C554238BEE18A03D736525E06D9258C9ECF7F64EAD7C6B0D1EB04DB2C0DE30D0
@@ -89,8 +88,7 @@ Installers:
     UpgradeCode: '{23170F69-40C1-2701-0000-000004000000}'
   InstallationMetadata:
     DefaultInstallLocation: '%ProgramFiles(x86)%\7-Zip'
-- InstallerLocale: en-US
-  Architecture: x64
+- Architecture: x64
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/18.05/7z1805-x64.msi
   InstallerSha256: 898C1CA0015183FE2BA7D55CACF0A1DEA35E873BF3F8090F362A6288C6EF08D7

diff --git a/manifests/7/7zip/7zip/18.06/7zip.7zip.installer.yaml b/manifests/7/7zip/7zip/18.06/7zip.7zip.installer.yaml
@@ -75,8 +75,7 @@ Installers:
     SilentWithProgress: /S
     InstallLocation: /D="<INSTALLPATH>"
   ProductCode: 7-Zip
-- InstallerLocale: en-US
-  Architecture: x86
+- Architecture: x86
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/18.06/7z1806.msi
   InstallerSha256: E1E509FB1FC6C7B7C2F55B1831454084541EE0A6C0A3F67730CDC4CA6BDD443B
@@ -89,8 +88,7 @@ Installers:
     UpgradeCode: '{23170F69-40C1-2701-0000-000004000000}'
   InstallationMetadata:
     DefaultInstallLocation: '%ProgramFiles(x86)%\7-Zip'
-- InstallerLocale: en-US
-  Architecture: x64
+- Architecture: x64
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/18.06/7z1806-x64.msi
   InstallerSha256: F00E1588ED54DDF633D8652EB89D0A8F95BD80CCCFC3EED362D81927BEC05AA5

diff --git a/manifests/7/7zip/7zip/19.00/7zip.7zip.installer.yaml b/manifests/7/7zip/7zip/19.00/7zip.7zip.installer.yaml
@@ -75,8 +75,7 @@ Installers:
     SilentWithProgress: /S
     InstallLocation: /D="<INSTALLPATH>"
   ProductCode: 7-Zip
-- InstallerLocale: en-US
-  Architecture: x86
+- Architecture: x86
   InstallerType: wix
   InstallerUrl: https://7-zip.org/a/7z1900.msi
   InstallerSha256: B49D55A52BC0EAB14947C8982C413D9BE141C337DA1368A24AA0484CBB5E89CD
@@ -89,8 +88,7 @@ Installers:
     UpgradeCode: '{23170F69-40C1-2701-0000-000004000000}'
   InstallationMetadata:
     DefaultInstallLocation: '%ProgramFiles(x86)%\7-Zip'
-- InstallerLocale: en-US
-  Architecture: x64
+- Architecture: x64
   InstallerType: wix
   InstallerUrl: https://7-zip.org/a/7z1900-x64.msi
   InstallerSha256: A7803233EEDB6A4B59B3024CCF9292A6FFFB94507DC998AA67C5B745D197A5DC

diff --git a/manifests/7/7zip/7zip/21.07/7zip.7zip.installer.yaml b/manifests/7/7zip/7zip/21.07/7zip.7zip.installer.yaml
@@ -99,8 +99,7 @@ Installers:
     SilentWithProgress: /S
     InstallLocation: /D="<INSTALLPATH>"
   ProductCode: 7-Zip
-- InstallerLocale: en-US
-  Architecture: x86
+- Architecture: x86
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/21.07/7z2107.msi
   InstallerSha256: B3CA98A8784C710108BBF56F9355AC6060AF770B8459A32D94CC09B73CF0AF7E
@@ -113,8 +112,7 @@ Installers:
     UpgradeCode: '{23170F69-40C1-2701-0000-000004000000}'
   InstallationMetadata:
     DefaultInstallLocation: '%ProgramFiles(x86)%\7-Zip'
-- InstallerLocale: en-US
-  Architecture: x64
+- Architecture: x64
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/21.07/7z2107-x64.msi
   InstallerSha256: 5447C9AC39C48F1BC7C88359B0520396A8C9707B307C107236A93A68E6FD3EB6

diff --git a/manifests/7/7zip/7zip/24.07/7zip.7zip.installer.yaml b/manifests/7/7zip/7zip/24.07/7zip.7zip.installer.yaml
@@ -99,8 +99,7 @@ Installers:
     SilentWithProgress: /S
     InstallLocation: /D="<INSTALLPATH>"
   ProductCode: 7-Zip
-- InstallerLocale: en-US
-  Architecture: x86
+- Architecture: x86
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/24.07/7z2407.msi
   InstallerSha256: DFADE8EFDDC176F3EEB0929BEDEE5DB7220984DC37BF1EE12F23DFB1FB15D53C
@@ -113,8 +112,7 @@ Installers:
     UpgradeCode: '{23170F69-40C1-2701-0000-000004000000}'
   InstallationMetadata:
     DefaultInstallLocation: '%ProgramFiles(x86)%\7-Zip'
-- InstallerLocale: en-US
-  Architecture: x64
+- Architecture: x64
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/24.07/7z2407-x64.msi
   InstallerSha256: EB94DB7341E59F1871A4D4F60165563F1881E33AEF093B7D8427651C2A0F4B6F

diff --git a/manifests/7/7zip/7zip/24.08/7zip.7zip.installer.yaml b/manifests/7/7zip/7zip/24.08/7zip.7zip.installer.yaml
@@ -99,8 +99,7 @@ Installers:
     SilentWithProgress: /S
     InstallLocation: /D="<INSTALLPATH>"
   ProductCode: 7-Zip
-- InstallerLocale: en-US
-  Architecture: x86
+- Architecture: x86
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/24.08/7z2408.msi
   InstallerSha256: 66C495F8AB1316C8BCF4196B7942B4A65AFE0AF97D958B4999358684B02411A0
@@ -113,8 +112,7 @@ Installers:
     UpgradeCode: '{23170F69-40C1-2701-0000-000004000000}'
   InstallationMetadata:
     DefaultInstallLocation: '%ProgramFiles(x86)%\7-Zip'
-- InstallerLocale: en-US
-  Architecture: x64
+- Architecture: x64
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/24.08/7z2408-x64.msi
   InstallerSha256: 98330E7E6DB3507B444D576DC437A9AC4D82333A88A6BB6EF36A91FE3D85FA92

diff --git a/manifests/7/7zip/7zip/25.00/7zip.7zip.installer.yaml b/manifests/7/7zip/7zip/25.00/7zip.7zip.installer.yaml
@@ -99,8 +99,7 @@ Installers:
     SilentWithProgress: /S
     InstallLocation: /D="<INSTALLPATH>"
   ProductCode: 7-Zip
-- InstallerLocale: en-US
-  Architecture: x86
+- Architecture: x86
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/25.00/7z2500.msi
   InstallerSha256: 61FE4D6BE2A2E445A5B809F0BB27A741DD185511880596F0BDC05FC4903AB795
@@ -113,8 +112,7 @@ Installers:
     UpgradeCode: '{23170F69-40C1-2701-0000-000004000000}'
   InstallationMetadata:
     DefaultInstallLocation: '%ProgramFiles(x86)%\7-Zip'
-- InstallerLocale: en-US
-  Architecture: x64
+- Architecture: x64
   InstallerType: wix
   InstallerUrl: https://sourceforge.net/projects/sevenzip/files/7-Zip/25.00/7z2500-x64.msi
   InstallerSha256: B48E905ED02C530638E6173F2D743668E63561AAC1914D2723FBEE5690792272

diff --git a/manifests/7/7zip/7zip/25.01/7zip.7zip.installer.yaml b/manifests/7/7zip/7zip/25.01/7zip.7zip.installer.yaml
@@ -99,8 +99,7 @@ Installers:
     SilentWithProgress: /S
     InstallLocation: /D="<INSTALLPATH>"
   ProductCode: 7-Zip
-- InstallerLocale: en-US
-  Architecture: x86
+- Architecture: x86
   InstallerType: wix
   InstallerUrl: https://7-zip.org/a/7z2501.msi
   InstallerSha256: DCE9E456ACE76B969FE0FE4D228BF096662C11D2376D99A9210F6364428A94C4
@@ -113,8 +112,7 @@ Installers:
     UpgradeCode: '{23170F69-40C1-2701-0000-000004000000}'
   InstallationMetadata:
     DefaultInstallLocation: '%ProgramFiles(x86)%\7-Zip'
-- InstallerLocale: en-US
-  Architecture: x64
+- Architecture: x64
   InstallerType: wix
   InstallerUrl: https://7-zip.org/a/7z2501-x64.msi
   InstallerSha256: E7EB0B7ED5EFA4E087B7B17F191797F7AF5B7F442D1290C66F3A21777005EF57

diff --git a/manifests/7/7zip/7zip/26.02/7zip.7zip.installer.yaml b/manifests/7/7zip/7zip/26.02/7zip.7zip.installer.yaml
@@ -99,8 +99,7 @@ Installers:
     SilentWithProgress: /S
     InstallLocation: /D="<INSTALLPATH>"
   ProductCode: 7-Zip
-- InstallerLocale: en-US
-  Architecture: x86
+- Architecture: x86
   InstallerType: wix
   InstallerUrl: https://github.com/ip7z/7zip/releases/download/26.02/7z2602.msi
   InstallerSha256: 55171BB369D0375AE0E6E8F6CCCFFFB112C8B13E5C991C4D1F6B21AD968C1AF0
@@ -113,8 +112,7 @@ Installers:
     UpgradeCode: '{23170F69-40C1-2701-0000-000004000000}'
   InstallationMetadata:
     DefaultInstallLocation: '%ProgramFiles(x86)%\7-Zip'
-- InstallerLocale: en-US
-  Architecture: x64
+- Architecture: x64
   InstallerType: wix
   InstallerUrl: https://github.com/ip7z/7zip/releases/download/26.02/7z2602-x64.msi
   InstallerSha256: DB407A4F6D4999E5C7BC00CE8A882BE94717B56E7FA68140FE3F12605D91643E

diff --git a/manifests/a/AIDotNet/OpenCowork/1.3.4/AIDotNet.OpenCowork.installer.yaml b/manifests/a/AIDotNet/OpenCowork/1.3.4/AIDotNet.OpenCowork.installer.yaml
@@ -0,0 +1,32 @@
+# Created with YamlCreate.ps1 Dumplings Mod
+# yaml-language-server: $schema=https://aka.ms/winget-manifest.installer.1.12.0.schema.json
+
+PackageIdentifier: AIDotNet.OpenCowork
+PackageVersion: 1.3.4
+InstallerType: nullsoft
+InstallerSwitches:
+  Upgrade: --updated
+UpgradeBehavior: install
+ProductCode: ef264783-8179-52ad-bf3a-efd1a5ce435d
+ReleaseDate: 2026-08-12
+Installers:
+- Architecture: x64
+  Scope: user
+  InstallerUrl: https://github.com/AIDotNet/OpenCowork/releases/download/1.3.4/OpenCowork-win-amd64-setup.exe
+  InstallerSha256: C04163A3C28A16E5660071565566FB35CB18C3FB2E0814274496ED465CF19CDB
+  InstallerSwitches:
+    Custom: /currentuser
+- Architecture: x64
+  Scope: machine
+  InstallerUrl: https://github.com/AIDotNet/OpenCowork/releases/download/1.3.4/OpenCowork-win-amd64-setup.exe
+  InstallerSha256: C04163A3C28A16E5660071565566FB35CB18C3FB2E0814274496ED465CF19CDB
+  InstallerSwitches:
+    Custom: /allusers
+- Architecture: arm64
+  Scope: machine
+  InstallerUrl: https://github.com/AIDotNet/OpenCowork/releases/download/1.3.4/OpenCowork-win-arm64-setup.exe
+  InstallerSha256: 972ED8E3D66550E4A7B175BDC87CA156C54132A5BB02C8388EA0C19C8DE6F18E
+  InstallerSwitches:
+    Custom: /allusers
+ManifestType: installer
+ManifestVersion: 1.12.0