Skip to content

fix: enforce macOS notarization verification - #43

Merged
wimi321 merged 1 commit into
mainfrom
fix/macos-notarization-proof
Aug 8, 2026
Merged

fix: enforce macOS notarization verification#43
wimi321 merged 1 commit into
mainfrom
fix/macos-notarization-proof

Conversation

@wimi321

@wimi321 wimi321 commented Aug 8, 2026

Copy link
Copy Markdown
Owner

Summary

  • correct stale multilingual download documentation for the current v0.4.20 release
  • notarize and staple each final macOS DMG before artifact upload
  • block publication unless app signatures, Gatekeeper, app/DMG tickets, and DMG integrity all pass
  • add a release workflow contract test and update the signing runbook

Verified current release

Both public v0.4.20 app bundles were independently downloaded and verified as Developer ID signed, Apple-notarized, stapled, and accepted by Gatekeeper. Their DMG SHA-256 values match the GitHub release metadata and both images pass hdiutil verification.

Verification

  • pnpm check
  • pnpm check:teacher-quality
  • pnpm check:release-notes-i18n
  • pnpm check:website
  • workflow YAML parse
  • public v0.4.20 arm64/x64 codesign, spctl, stapler, SHA-256, and hdiutil checks

@wimi321
wimi321 merged commit e883c25 into main Aug 8, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant