Skip to content

fix: await mac signing before notarization - #72

Merged
wolfiesch merged 2 commits into
mainfrom
codex/fix-macos-promise-signer
Jul 19, 2026
Merged

fix: await mac signing before notarization#72
wolfiesch merged 2 commits into
mainfrom
codex/fix-macos-promise-signer

Conversation

@wolfiesch

Copy link
Copy Markdown
Collaborator

Outcome

Fix the Mac release race exposed by v0.1.26 and prepare v0.1.27.

  • use the Promise-based @electron/osx-sign API so electron-builder waits for nested code signing
  • retain the narrow OMP-only library-validation entitlement
  • add a regression check that the signer is awaitable
  • advance all release surfaces to v0.1.27; v0.1.26 published no files

Verification

  • pnpm test:packaging (49 passing)
  • pnpm check
  • pnpm check:release
  • pnpm test: focused transcript image rerun passed 25/25 after one unrelated concurrent-suite timeout

Copilot AI review requested due to automatic review settings July 19, 2026 11:06

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR fixes a macOS release race by switching the Electron mac signing hook to the Promise-based @electron/osx-sign API so notarization can’t start before nested code signing completes, and it advances all release/version surfaces to v0.1.27 after the v0.1.26 artifact publication failure.

Changes:

  • Switch macOS signing to signAsync and route electron-builder signing through an awaitable signer.
  • Add a regression test asserting the signer is awaitable.
  • Bump versions/release references to 0.1.27 across docs, packages, site/web/mobile/desktop surfaces, and release-consistency tests.

Reviewed changes

Copilot reviewed 27 out of 27 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
SECURITY.md Updates macOS release version reference to v0.1.27.
scripts/sign-macos.mjs Uses Promise-based signAsync and exports macSigner for awaitability.
scripts/packaging.test.mjs Adds regression test ensuring macOS signer returns a thenable.
scripts/check-release-consistency.test.mjs Updates release drift guards to v0.1.27.
README.md Updates download links and “what changed” section to v0.1.27.
packages/ui/package.json Bumps package version to 0.1.27.
packages/service-manager/package.json Bumps package version to 0.1.27.
packages/remote/package.json Bumps package version to 0.1.27.
packages/protocol/test/fixtures/platform-boundaries.ts Updates protocol fixtures to latestVersion 0.1.27.
packages/protocol/package.json Bumps package version to 0.1.27.
packages/fixture-server/package.json Bumps package version to 0.1.27.
packages/client/src/omp-client-frames.ts Updates default client hello version to 0.1.27.
packages/client/package.json Bumps package version to 0.1.27.
package.json Bumps workspace root version to 0.1.27.
e2e/site-mobile-docs.spec.ts Updates expected Android download URL to v0.1.27.
docs/CURRENT_RELEASE_NOTES.md Updates release notes to v0.1.27 and explains v0.1.26 artifact absence.
compat/omp-app-matrix.json Updates desktop protocol version mapping to 0.1.27.
apps/web/src/platform/browser-shell-port.ts Updates reported client version to 0.1.27.
apps/web/package.json Bumps app version to 0.1.27.
apps/site/test/release.test.ts Updates release asset contract assertions to v0.1.27.
apps/site/src/release.ts Updates release tag/version and asset filenames to v0.1.27.
apps/site/package.json Bumps app version to 0.1.27.
apps/mobile/package.json Bumps app version to 0.1.27.
apps/mobile/capacitor.config.json Updates appended user agent version to 0.1.27.
apps/desktop/src/target-manager.ts Updates desktop client metadata version to 0.1.27.
apps/desktop/package.json Bumps app version to 0.1.27.
.github/ISSUE_TEMPLATE/bug_report.yml Updates bug report version placeholder to 0.1.27.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread scripts/packaging.test.mjs
@wolfiesch
wolfiesch merged commit 9b6f842 into main Jul 19, 2026
4 checks passed
@wolfiesch
wolfiesch deleted the codex/fix-macos-promise-signer branch July 19, 2026 11:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants