jwinterm d0f4e20b29 ci(macos): sign without get-task-allow, and show the notary log on refusal ...

The first notarized submission came back Invalid: xcodebuild build injects
com.apple.security.get-task-allow into the signature, which archive would
have stripped and which notarization and App Store review both reject.
build_signed.sh now passes CODE_SIGN_INJECT_BASE_ENTITLEMENTS=NO and
refuses an app still signed with it, before any upload.

notarytool exits 0 on Invalid, and the step learned the result only when
stapling failed with an unrelated-looking CloudKit error. It now reads the
status, and on anything but Accepted prints Apple's log and names the
submission.

2026-10-27 16:10:23 -04:00

..

assets

spanish: miscellaneous fixes (#2408)

2025-07-24 04:12:57 +03:00

ISSUE_TEMPLATE

privacy: only domain-anchored address resolvers; drop Cake endpoints

2026-08-15 16:28:54 -04:00

workflows

ci(macos): sign without get-task-allow, and show the notary log on refusal

2026-10-27 16:10:23 -04:00

pull_request_template.md

Cw 1038 filter transaction popup not scrollable (#2207)

2025-04-18 14:53:22 +02:00