Fix/m7 ci uitest runner sign #76

2026-09-10T09:01:08+01:00

gronod commented

2026-09-10 09:01:08 +01:00

No description provided.

gronod added 4 commits 2026-09-10 09:01:08 +01:00

fix(packaging): make sidecar sign/verify recursive (#32 , #165 ) a2243be298

The Argyll tree inside the bundle is nested (macos-universal/, mocks/),
so a top-level-only scan left real binaries unverified. Scan recursively
under Contents/Resources/Argyll, hard-fail on any unsigned Mach-O or a
missing/empty sidecar dir, and sign fetched tools recursively too.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

fix(packaging): stage the built .app into the DMG (#32 ) 5379b4a94f

dmgbuild never set `files`, so the volume mounted empty. Export DMG_APP
from package-release.sh and require it in dmgbuild-settings.py, copying
the bundle by its source path. Keep the Applications symlink and the
optional background fallback.

Verified by mounting a test image and seeing ICCery.app + Applications.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

fix(packaging): use fixed derived-data path, correct sign/verify flow 62eb5730a9

package-release.sh previously parsed -showBuildSettings for the app path,
which could disagree with the actual build. Now use a single
derivedDataPath and locate Release/ICCery.app directly. Add Developer ID
signing with --timestamp and a post-sign verify, while leaving sidecars
ad-hoc. Re-verify sidecars after app signing and re-ad-hoc any that were
stripped. Install dmgbuild in a venv and use DMG_APP env.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

ci(macos): restore workflow, fix test signing and packaging (#32 )

macOS CI / package (pull_request) Canceled after 0s

Details

macOS CI / build-and-test (pull_request) Canceled after 49s

Details

65457b903e

- Keep CI active on develop (push + PR) and tags v*.
- Generate the project with `xcodegen generate --spec project.yml`.
- build-for-testing / test-without-building share one derivedDataPath,
  destination, universal archs, and ad-hoc signing flags. The XCTest
  runner is never re-signed with --options runtime.
- Package job runs package-release.sh after tests pass and uploads the
  ICCery-*.dmg the script actually writes.
- README documents the env vars the pipeline reads.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

gronod added 1 commit 2026-09-10 09:01:27 +01:00

Merge branch 'develop' into fix/m7-ci-uitest-runner-sign

macOS CI / build-and-test (pull_request) Canceled after 0s

Details

macOS CI / package (pull_request) Canceled after 0s

Details

ac2ecbdc40

gronod merged commit d40f0052d2 into develop

2026-09-10 09:01:44 +01:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: gronod/iccery-v2-mac#76