Now available as a DMG
Releases now ship InfoGrep.dmg — open it and drag InfoGrep to Applications — alongside
the usual InfoGrep.app.zip. Same bundle, take whichever you prefer.
To be clear about what this does not change: the app is ad-hoc signed rather than
notarized, so macOS still quarantines it on download and first launch still needs
right-click → Open once, or:
xattr -dr com.apple.quarantine /Applications/InfoGrep.app
A DMG can't skip that step — only a Developer ID signature plus notarization would.
Files with uppercase extensions are now indexed
The include/exclude globs were matched case-sensitively, so a config listing **/*.png
skipped PHOTO.PNG entirely. On macOS and Windows the filesystem doesn't distinguish the
two, and cameras, scanners, and phones routinely emit .JPG / .HEIC / .PDF. On a real
54k-file corpus this had silently hidden 169 files — including 9 .DOC, 7 .DOCX and 6
.PDF whose contents were never extracted, not merely their names.
Your next infogrep index will pick them up; no reindex flag needed.
Releases are verified before they go out
Packaging is now followed by a step that unzips the zip, mounts the DMG, and verifies the
code signature inside each. A bundle whose seal breaks during packaging is rejected as
"damaged" on every other Mac, and until now nothing caught that until someone downloaded
it — which is exactly how 0.0.4's de-quarantine bug escaped.
The bundled-backend smoke test also now runs with the launcher's own environment, so it
can no longer write .pyc into the bundle and invalidate the signature it just made.
Also
- Ruff is pinned to one minor series in both CI and the dev dependency. CI installed the
newest ruff while the dev pin floated, so the two linted against different rules and the
build had been red since 13 Aug on code nobody had touched.