Security update warning: macOS Gatekeeper strictness on unsigned DMG/Apps

[neuralldev]

Hi @MAKOMO,

Just wanted to share a heads-up regarding macOS security changes, since I'm mostly working on MacOS.

On recent releases (from macOS Tahoe 26.5 as far as I see), Gatekeeper no longer allows users to download unsigned/unnotarized .dmg files or binaries and quarantine all the files downloaded from any browser.

Users running unsigned builds now have for example to manually run xattr -d com.apple.quarantine in the terminal. It is very confusing as it says that the file is corrupted, not that it is not signed ;)

If Artisan users start reporting that DMGs won't launch at all, this change in macOS behavior is likely the cause. Signing and notarizing builds via notary tool will probably become mandatory to maintain a seamless installation flow on Mac. I've got some code running that I will share with pleasure if you are interested in.

Thanks for all the work done on Artisan!

[MAKOMO]

Thanks for the heads up! Just so you know, all official macOS builds are signed and notarized for years. The CI development builds are not, so I don't think there's a need to have those signed.

[neuralldev]

perfect!