mirror of
https://github.com/travelerdev/frameloader.git
synced 2026-10-17 16:02:31 +02:00
Zack SheppardandClaude Opus 5.5
26872c7396
* Sign and notarize macOS release builds Release builds of the Mac app now run in the protected release-signing environment (approval required, v* tags only), are signed with the Developer ID certificate, notarized with the App Store Connect key, and checked with codesign, spctl and stapler before upload. Push and PR builds stay ad-hoc signed and never see the secrets. - electron-builder config moved to electron-builder.config.cjs, which switches between ad-hoc and Developer ID signing based on CSC_LINK - Hardened runtime entitlements for Electron - Local network usage description and Bonjour services in Info.plist for the macOS 15+ local network prompt - README: signing setup and current "Open Anyway" steps Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Only export signing variables for signed Mac builds electron-builder treats an empty CSC_LINK as a certificate path, so PR builds failed with "apps/desktop not a file". The variables are now exported only by the signing step, which also checks every secret is present. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Keep Mac signing secrets inside the build step They were exported through GITHUB_ENV, which makes them visible to every later step and action in the job (artifact upload, post steps). They now live only in the build step's environment, and the notarization key file is deleted when the step exits. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Build pull requests once, not once per push and once per PR Push builds now run only for main; branch commits are built through their pull request. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>