|
|
12b01f065c
|
desktop-release: architecture guard before signing (tauri build --no-sign, guard, then tauri bundle signs / notarizes): every Mach-O in the app must contain arm64, nothing Intel-only, Info.plist must not force Intel (LSRequiresNativeExecution false, LSArchitecturePriority x86_64 first); guard repeated on the signed app, the DMG and the updater bundle, recorded in evidence.json
|
2026-10-13 02:32:09 +08:00 |
|
|
|
f2d7062bcb
|
docs desktop-release: the Linux job starts the AppImage and the deb under Xvfb
|
2026-10-13 02:09:58 +08:00 |
|
|
|
3952716ef8
|
desktop-release: never run the x86_64 slice on the build Mac (Rosetta makes macOS warn the owner that the app will not open in the next macOS); every Mach-O in the bundle checked with lipo (arm64 + x86_64), self-test and sidecar version run natively only; pitfall 34
|
2026-10-13 02:01:35 +08:00 |
|
|
|
bddebcc8fa
|
docs: Windows runner on the VDS (Server 2022 eval in a KVM VM, CRT user level, windows:host); desktop.yml comments
|
2026-10-11 06:59:02 +08:00 |
|
|
|
0b52c4ab40
|
docs: runner setup done (Forgejo Actions, VDS runner, ci.yml); desktop.yml without verbose bundling
|
2026-10-11 06:15:00 +08:00 |
|
|
|
fc538e1dde
|
Desktop release: Developer ID gates on the exact artifacts (every binary inside out: Developer ID, hardened runtime, timestamp, no sandbox or get-task-allow; spctl exec/open and stapler on the app, the app in the DMG and in the updater bundle, the DMG); notarization key from ASC_KEY_ID / ASC_ISSUER_ID / ASC_P8 too
|
2026-10-11 05:18:41 +08:00 |
|
|
|
e63cb5bff7
|
docs: desktop release (keys, privacy gate, signing, runners, hosting, publish); downloads page site/desktop/
|
2026-10-11 05:17:00 +08:00 |
|
