Jonas Schnelli
Jonas Schnelli
https://github.com/signal11/hidapi/commit/3a66d4e513ed1b1ce82b7e6fcfa30ff05598b696 this commit is un Ubuntus version but not in the 0.8.0rc1 tag. Maybe spun of a rc2?
I looked a bit into this issue and I think a possible approach could be: * During the manual macOS code signing process via `detached-sig-create.sh` (currently done by me), we...
For test purposes, I notarized the 0.19.1rc**1** dmg file (RC1! not 2!). If anyone can test if the 0.19.1rc1 gives them a notarization warning ("...apple can not check the app...
Great. So just notarizing the .dmg during the release process would work. Additionally, we could staple the notarization ticket onto the app bundle. But that would be non trivial via...
@luke-jr it’s still the same process (detached signature). Just an additional flag. The actual notarization binds to the hash of the deterministic built dmg.
@luke-jr From my understanding it works like this (simplified): * We build the dmg in the same was as now * The macOS codesign key holder notarizes the .dmg file:...
@Sjors: this is indeed a good point. Though I don't know if we can even prevent the ugly online check when we staple the notarization ticket to the application. Maybe...
utACK 234e4678c774aa0021a45810acd9a0f3f5bf3b64
Removed the 0.21 milestone again. This seems indeed be too controversial for a last minute 0.21 merge.
My 5cts on this: * Using the .zip file seems to be an approach done more and more by common software packages * The disk image offers a more native...