mirror of
https://github.com/bherbruck/solidcraft.git
synced 2026-11-06 20:02:16 +00:00
Mikalai Kukhta
4e2270517a
* Release: sign and notarize the macOS app with a Developer ID (#5749) package.sh --sign signs the app, the CLI and the DMG with the hardened runtime and a secure timestamp, notarizes the DMG and the CLI zip, staples the DMG and checks it with stapler and spctl. The app carries entitlements.plist: com.apple.security.cs.disable-library-validation lets the hardened runtime load 3Dconnexion's client framework (crates/threedx-client). signing.sh --setup imports the certificate into a temporary keychain and writes the API key; --cleanup removes both. The release workflow builds both architectures first (macos-build, no secrets), then signs and packages in the join job. Without the APPLE_* secrets (forks, dry runs) the app keeps its ad-hoc signature and the job summary says so. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> * macOS release: staple the app before the DMG, retry stapler, document renewal (#5749) Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
13 lines
594 B
Plaintext
13 lines
594 B
Plaintext
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
<plist version="1.0">
|
|
<dict>
|
|
<!-- The hardened runtime only loads libraries signed by our own team. The 3D mouse support
|
|
(crates/threedx-client/src/macos.rs) dlopens 3Dconnexion's
|
|
/Library/Frameworks/3DconnexionClient.framework, which is signed by 3Dconnexion. Without
|
|
this, the load fails and the 3D mouse stops working without any message. -->
|
|
<key>com.apple.security.cs.disable-library-validation</key>
|
|
<true/>
|
|
</dict>
|
|
</plist>
|