Repository navigation
Add signed macOS releases for Apple Silicon and Intel - #1
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds macOS release automation with separate native Apple Silicon and Intel builds. Version tags publish Developer ID-signed, Apple-notarized DMG and ZIP downloads only after both architectures pass; manual runs and the release/macos branch upload verification artifacts without publishing.
The release scripts isolate credentials in a temporary keychain, verify the signing team, sign nested code, notarize and staple the app and DMG, generate final checksums, and verify both packaged formats with Gatekeeper and daemon lifecycle smoke tests. Credential cleanup runs even after a failure.
The app snapshot includes persistent background agents and terminal sessions, the Alacritty PTY backend (removing the sibling Termy checkout requirement), and the accompanying settings and UI updates.
Validation: local frontend/app builds, 14 Rust tests, workflow validation with actionlint, shell syntax checks, release-version checks, and the packaged daemon smoke test pass. Credentialed ARM and Intel builds and downloaded-artifact verification are in progress.