osx-sign

osx-sign copied to clipboard

chore: bump fs-extra from 10.0.0 to 11.2.0

2

threema-danilo

``` "@electron-forge/cli": "7.5.0", "@electron-forge/maker-deb": "7.5.0", "@electron-forge/maker-dmg": "7.5.0", "@electron-forge/maker-rpm": "7.5.0", "@electron-forge/maker-squirrel": "7.5.0", "@electron-forge/maker-zip": "7.5.0", ``` ``` npm run package > [email protected] package > electron-vite build --outDir=dist && DEBUG=electron-osx-sign* electron-forge package [sentry-vite-plugin]...

t3rrey

Issues with @electron/osx-sign version 1.3.1 causing validation errors (90230, 90264)

1

### Description I encountered multiple validation errors when uploading my pkg file using Transporter after upgrading `@electron/osx-sign` from version 1.3.0 to 1.3.1. Reverting back to version 1.3.0 resolves these issues....

Jeepeng

My app has been uploaded to TestFlight and has passed the signature verification. However, when installing and opening the app, a blank window appears. The non-Mac App Store version works...

leyafo

Asset validation failed. Invalid product archive.

2

Node: v20.15.0 Electron: v31.1.0 Electron Forge: v7.4.0 Working on submitting a "mas" build to the Mac App Store. The build is packaged, code-signed and sandboxed correctly. However uploading the pkg...

sanjubhambhani

fix: fast memory/open file handle bail outs

1

Please be kind :) i only hacked it together, since i do not find any tests for the util methods. it is just an idea. 1. collecting everything for each...

KillerCodeMonkey

I created an issue at electron-builder, but i debugged and invested time to nail it down and it seems it is an osx-sign issue: Check: https://github.com/electron-userland/electron-builder/issues/8306 Long story short: I...

KillerCodeMonkey

redact passwords from logs correcrtly

1

also return an opts if possible.

MegaManSec

[Help] walkAsync function incorrectly follows symbolic links, leading to a directory traversal vulnerability

1

file:src/util.ts In the current walkAsync function, using 'const stat = await fs.**stat**(filePath);' causes 'stat.isSymbolicLink()' to always return 'false' because stat returns the target file's metadata. I propose changing it to...

tredcx

fix(perf): sign multiple files at once

4

I was recently debugging a code-signing issue and noticed in the logs that we're signing one file at a time, which translates to a few hundreds of `childProcess.exec('codesign')` calls. `codesign`...

erikian