The Windows installer builds on Linux. Tauri's installer script includes Win\RestartManager.nsh, which NSIS ships from 3.10 on, and Debian's NSIS is 3.08, so makensis stopped at it; the job adds that one header from NSIS 3.11's source, checked against its SHA-256.