Signed and notarized macOS distribution. The .dmg now installs without the Gatekeeper "downloaded from the internet" warning.
Highlights
- macOS Developer ID signing + Apple notarization + staple integrated into the release pipeline
- Hardened Runtime entitlements for bundled CPython + PyO3 + FFmpeg
- One-shot signed release script:
scripts/sign-release.sh - Rotated Tauri updater minisign keypair
Checksums
SHA256 (Unfoldly.dmg): 446992cf66f014018e93e163fc78032177aefe7522ebf8affce2c2d9798f6422