release: v0.3.0

release: empty keychain-args array must not trip set -u on macOS bash 3.2
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-09-05 10:07:53 +04:00 · 2026-09-05 10:07:52 +04:00 · 2026-09-05 06:07:05 +00:00 · 2026-09-05 10:06:57 +04:00 · 2026-09-05 10:03:48 +04:00 · 2026-09-05 10:03:40 +04:00
2 changed files with 12 additions and 5 deletions
@@ -13,9 +13,9 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>0.2.0</string>
+	<string>0.3.0</string>
 	<key>CFBundleVersion</key>
-	<string>2</string>
+	<string>3</string>
 	<key>LSMinimumSystemVersion</key>
 	<string>14.0</string>
 	<key>LSUIElement</key>
@@ -214,7 +214,7 @@ fi
 # above, which is what ships. A no-op when the two happen to be the same.
 echo "==> Signing ${APP_BUNDLE} with resolved identity"
 run_signed codesign --force --options runtime --timestamp \
-    "${CODESIGN_KEYCHAIN_ARGS[@]}" \
+    ${CODESIGN_KEYCHAIN_ARGS[@]+"${CODESIGN_KEYCHAIN_ARGS[@]}"} \
    --sign "${SIGN_IDENTITY}" \
    --identifier "${BUNDLE_ID}" \
    "${APP_BUNDLE}"
@@ -359,11 +359,18 @@ SPCTL_STATUS=$?
 set -e
 echo "${SPCTL_OUTPUT}"
 if [[ "${SPCTL_STATUS}" -ne 0 ]] || ! grep -qi 'accepted' <<<"${SPCTL_OUTPUT}"; then
-    echo "spctl did not report accepted for ${APP_BUNDLE}." >&2
+    if [[ "${NOTARIZED}" -eq 1 ]]; then
+        echo "spctl did not report accepted for ${APP_BUNDLE} although it was notarized." >&2
        exit 1
    fi
+    echo "WARNING: Gatekeeper does not accept this build (not notarized). First install on other Macs needs right-click > Open." >&2
+fi

 TEAM_IDENTIFIER="$(codesign -dv "${APP_BUNDLE}" 2>&1 | awk -F= '/^TeamIdentifier=/{print $2}')"
+if [[ -z "${TEAM_IDENTIFIER}" ]]; then
+    echo "No TeamIdentifier on ${APP_BUNDLE} — the build is not signed with a team identity; refusing to publish." >&2
+    exit 1
+fi

 echo "==> Writing ${APPCAST_PATH}"
 python3 - "${VERSION}" "${ZIP_URL}" "${SHA256}" "${NOTES}" "${PUBDATE}" "${APPCAST_PATH}" "${NOTARIZED}" "${TEAM_IDENTIFIER}" <<'PY'
Author	SHA1	Message	Date
Claude Fable 5	8b53a727e3	release: v0.3.0	2026-09-05 10:07:53 +04:00
Claude Fable 5	fdec105174	release: empty keychain-args array must not trip set -u on macOS bash 3.2 Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-09-05 10:07:52 +04:00
kua-agent	12128b016d	Merge pull request 'Redline updater hardening: signed-update verification, atomic install + revert, update visibility, notarization pipeline (MMDB-2681)' (#24 ) from feat/updater-hardening-20260905 into main Merge pull request #24: Redline updater hardening (MMDB-2681)	2026-09-05 06:07:05 +00:00
Claude Fable 5	a32cd03581	review: refuse to publish a bundle without a team identifier; document the allowed-teams override Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-09-05 10:06:57 +04:00
Claude Fable 5	8a12ed0a54	release: NOTARIZED is 0/1, compare numerically Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-09-05 10:03:48 +04:00
Claude Fable 5	bfdc6fde9d	release: spctl gate only hard-fails when the build was notarized Un-notarized fallback builds (Apple Development identity) are rejected by spctl by design; the script must still publish them with a warning, otherwise the fallback path can never release. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-09-05 10:03:40 +04:00