Claude c81dbb0127 feat(desktop): wire macOS Developer ID signing + notarization ...

Add gated code-signing + notarization for the macOS desktop DMG so it can
clear Gatekeeper and stay in Homebrew's main cask (unsigned casks are
rejected after 2026-09-01).

- desktopApp/build.gradle.kts: macOS signing{}/notarization{} blocks, gated
  on the AMETHYST_MAC_SIGN_IDENTITY env var. Absent => unsigned DMG, exactly
  as before, so local dev and PR CI are unaffected.
- create-release.yml: import a Developer ID cert into a throwaway keychain on
  the macOS leg and export the signing/notary env. Soft-gated on the
  MAC_CERTIFICATE_P12 secret — no secret => unsigned build.
- BUILDING.md: document the six MAC_* secrets, how to generate them, and flip
  the unsigned-cask fallback note to reflect the wiring is now in place
  (pending Apple credentials).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015sso31DfSF9B6EFCVkEqWD

2026-06-17 23:06:07 +00:00

..

build.yml

fix(desktop,media): address PR #3175 review findings

2026-06-11 17:46:12 +03:00

bump-homebrew.yml

chore(actions): bump the actions group with 4 updates

2026-04-17 12:20:54 +00:00

bump-winget.yml

chore(actions): bump the actions group with 4 updates

2026-04-17 12:20:54 +00:00

create-release.yml

feat(desktop): wire macOS Developer ID signing + notarization

2026-06-17 23:06:07 +00:00

crowdin.yml

ci: add explicit permissions to workflows

2026-03-28 09:32:48 +00:00

smoke-test-desktop.yml

fix(desktop,media): address PR #3175 review findings

2026-06-11 17:46:12 +03:00