fix(release): restore packaging assets and CI deps

This commit is contained in:
webadderall
2026-03-29 00:13:01 +11:00
parent 241ab2cff4
commit 5978ef42be
4 changed files with 56 additions and 13 deletions
+8
View File
@@ -90,6 +90,14 @@ jobs:
- name: Install dependencies
run: npm ci --ignore-scripts
- name: Install Linux native build dependencies
run: |
sudo apt-get update
sudo apt-get install -y libx11-dev libxtst-dev libxkbfile-dev libxi-dev
- name: Remove stale uiohook build output
run: rm -rf node_modules/uiohook-napi/build
- name: Install app dependencies
run: npx electron-builder install-app-deps
+20 -13
View File
@@ -327,26 +327,18 @@ jobs:
with:
python-version: '3.11'
- name: Validate Windows signing secrets
- name: Configure Windows signing
shell: pwsh
env:
WINDOWS_SIGNING_CERTIFICATE_P12_BASE64: ${{ secrets.WINDOWS_SIGNING_CERTIFICATE_P12_BASE64 }}
WINDOWS_SIGNING_CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_SIGNING_CERTIFICATE_PASSWORD }}
run: |
foreach ($name in @('WINDOWS_SIGNING_CERTIFICATE_P12_BASE64', 'WINDOWS_SIGNING_CERTIFICATE_PASSWORD')) {
$value = [Environment]::GetEnvironmentVariable($name)
if ([string]::IsNullOrWhiteSpace($value)) {
Write-Error "Missing required Windows release secret: $name"
exit 1
}
if ([string]::IsNullOrWhiteSpace($env:WINDOWS_SIGNING_CERTIFICATE_P12_BASE64) -or [string]::IsNullOrWhiteSpace($env:WINDOWS_SIGNING_CERTIFICATE_PASSWORD)) {
Write-Warning 'Windows signing secrets are missing. Building an unsigned installer.'
Add-Content -Path $env:GITHUB_ENV -Value 'CSC_IDENTITY_AUTO_DISCOVERY=false'
exit 0
}
- name: Prepare Windows signing certificate
shell: pwsh
env:
WINDOWS_SIGNING_CERTIFICATE_P12_BASE64: ${{ secrets.WINDOWS_SIGNING_CERTIFICATE_P12_BASE64 }}
WINDOWS_SIGNING_CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_SIGNING_CERTIFICATE_PASSWORD }}
run: |
$certPath = Join-Path $env:RUNNER_TEMP 'windows-signing-cert.p12'
[IO.File]::WriteAllBytes($certPath, [Convert]::FromBase64String($env:WINDOWS_SIGNING_CERTIFICATE_P12_BASE64))
Add-Content -Path $env:GITHUB_ENV -Value "WIN_CSC_LINK=$certPath"
@@ -355,6 +347,13 @@ jobs:
- name: Install dependencies
run: npm ci --ignore-scripts
- name: Remove stale uiohook build output
shell: pwsh
run: |
if (Test-Path node_modules/uiohook-napi/build) {
Remove-Item node_modules/uiohook-napi/build -Recurse -Force
}
- name: Install app dependencies
run: npx electron-builder install-app-deps
@@ -399,9 +398,17 @@ jobs:
with:
python-version: '3.11'
- name: Install Linux native build dependencies
run: |
sudo apt-get update
sudo apt-get install -y libx11-dev libxtst-dev libxkbfile-dev libxi-dev
- name: Install dependencies
run: npm ci --ignore-scripts
- name: Remove stale uiohook build output
run: rm -rf node_modules/uiohook-napi/build
- name: Install app dependencies
run: npx electron-builder install-app-deps
+14
View File
@@ -0,0 +1,14 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.security.cs.allow-jit</key>
<true/>
<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
<true/>
<key>com.apple.security.cs.disable-library-validation</key>
<true/>
<key>com.apple.security.inherit</key>
<true/>
</dict>
</plist>
+14
View File
@@ -0,0 +1,14 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.security.cs.allow-jit</key>
<true/>
<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
<true/>
<key>com.apple.security.cs.disable-library-validation</key>
<true/>
<key>com.apple.security.device.audio-input</key>
<true/>
</dict>
</plist>