mirror of
https://github.com/libretro/virtualjaguar-libretro.git
synced 2026-11-11 03:21:25 -10:00
Joe MattielloandClaude Opus 5.5
e652c916ed
* ci(macos): sign and notarize every macOS build (#989) Move the keychain import / codesign / notarytool logic into the composite action .github/actions/macos-sign (wrapping app/packaging/macos/codesign.sh) and use it for: the app package (now also on same-repo PRs), the App macOS arm64 binary, the macOS core dylibs, cue2cdi-macos-universal and the macOS chdman/jagcd tools. Bundles are stapled; bare Mach-O files are notarized but unstapled. A notarization failure warns off-tag and fails on a tag. Fork PRs get no secrets and keep the ad-hoc signature plus the warning. Co-Authored-By: Claude Opus 5.5 <[email protected]> * ci(macos): pass app.yml only the five APPLE_* secrets, not inherit SIGNPATH_API_TOKEN would otherwise ride along with sign: true and switch on the Windows SignPath steps for every PR. Co-Authored-By: Claude Opus 5.5 <[email protected]> --------- Co-authored-by: Claude Opus 5.5 <[email protected]>