luci-app-package-manager: Upload package is not working for untrusted packages anymore

[XCas13]

Is there an existing issue for this?

• I have searched among all existing issues (including closed issues)

screenshots or captures

No response

Actual behaviour

Try to install any untrusted APK (i.e. APK not from official repositories) via Upload Package button and you will get "ERROR: /tmp/upload.apk: UNTRUSTED signature"

Expected behaviour

Upload package should work for untrusted packages as well, otherwise there is no sense to keep this functionality.

Steps to reproduce

1. go to System->Software
2. click Update lists
3. click Upload Package and upload any valid, but untrusted APK
4. click Install

Additional Information

{
	"kernel": "6.12.74",
	"hostname": "Flint",
	"system": "ARMv8 Processor rev 4",
	"model": "GL.iNet GL-MT6000",
	"board_name": "glinet,gl-mt6000",
	"rootfs_type": "squashfs",
	"release": {
		"distribution": "OpenWrt",
		"version": "25.12.2",
		"firmware_url": "https://downloads.openwrt.org/",
		"revision": "r32802-f505120278",
		"target": "mediatek/filogic",
		"description": "OpenWrt 25.12.2 r32802-f505120278",
		"builddate": "1774469393"
	}
}

What browsers do you see the problem on?

No response

Relevant log output

[XCas13]

As I see fix is very easy: change action="add" to action="add --allow-untrusted" in /usr/libexec/package-manager-call script

[systemcrash]

You are correct. The alternative is to add the key for the repo/build-instance to your device.