chore: add macOS notarization support for DMG builds (#944)

This commit is contained in:
Copilot
2025-12-21 17:36:01 +01:00
committed by GitHub
parent da122e06f1
commit a5629b8c77
8 changed files with 241 additions and 3 deletions

View File

@@ -117,6 +117,18 @@ async function buildWithOptions(options: builder.CliOptions, buildInfo: BuildInf
? 'res/MQTT_Explorer_Store_Distribution_Profile.provisionprofile'
: 'res/MQTTExplorerdmg.provisionprofile'
dotProp.set(packageJson, 'build.mac.provisioningProfile', provisioningProfile)
// Set different entitlements for MAS vs DMG builds
if (buildInfo.package === 'mas') {
// MAS builds use the same sandboxed entitlements for parent and child processes
dotProp.set(packageJson, 'build.mac.entitlements', 'res/entitlements.mas.plist')
dotProp.set(packageJson, 'build.mac.entitlementsInherit', 'res/entitlements.mas.plist')
} else {
// DMG builds use different entitlements for notarization
// Parent app has network permissions, child processes have minimal permissions
dotProp.set(packageJson, 'build.mac.entitlements', 'res/entitlements.mac.plist')
dotProp.set(packageJson, 'build.mac.entitlementsInherit', 'res/entitlements.mac.inherit.plist')
}
}
try {