diff --git a/.github/workflows/desktop-release.yml b/.github/workflows/desktop-release.yml
index 67b0af7fe..0ab9bb63b 100644
--- a/.github/workflows/desktop-release.yml
+++ b/.github/workflows/desktop-release.yml
@@ -381,6 +381,9 @@ jobs:
 
       - name: Attempt manual Linux AppImage fallback
         if: env.IS_SMOKE_TAG != 'true' && steps.linux_tauri.outcome == 'failure'
+        env:
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
         shell: bash
         run: |
           set -euxo pipefail
diff --git a/packages/desktop/scripts/build-managed-runtime.mjs b/packages/desktop/scripts/build-managed-runtime.mjs
index 7ccaa50da..0412a5472 100644
--- a/packages/desktop/scripts/build-managed-runtime.mjs
+++ b/packages/desktop/scripts/build-managed-runtime.mjs
@@ -338,9 +338,9 @@ async function ensureSherpaNativePackage(runtimeRoot, bundledNodeRoot) {
       "utf8"
     )
   );
-  const versionRange = sherpaNodePackageJson.optionalDependencies?.[packageName];
-  if (!versionRange) {
-    throw new Error(`Unable to resolve optional sherpa package version for ${packageName}.`);
+  const packageVersion = sherpaNodePackageJson.version;
+  if (!packageVersion) {
+    throw new Error("Missing version in sherpa-onnx-node package.json.");
   }
 
   const nodeExecutable = process.platform === "win32"
@@ -356,7 +356,7 @@ async function ensureSherpaNativePackage(runtimeRoot, bundledNodeRoot) {
     "--omit=dev",
     "--no-package-lock",
     "--no-save",
-    `${packageName}@${versionRange}`,
+    `${packageName}@${packageVersion}`,
   ], {
     cwd: runtimeRoot,
     stdio: "inherit",