Skip to content

Utterform 0.7.5 — Signed and notarized for macOS

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Sep 16:41
· 21 commits to main since this release
v0.7.5
f0a8d83
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The Apple-Silicon release is signed with Utterform's stable Developer ID identity and
accepted by Apple's notary service before it is published.

What changes on a Mac

  • Gatekeeper identifies the downloaded app as notarized software from a known developer.
  • The stapled Apple ticket can be checked even when the Mac is offline.
  • The stable team and bundle identity lets macOS recognise later Utterform builds as the same app, rather than treating every ad-hoc-signed update as unrelated code.
  • Tagged releases now refuse to build unless the complete Apple signing configuration reaches the macOS job.

The first use still asks for Microphone access, and typing at the cursor still asks for
Accessibility access. Those permissions remain under your control in System Settings.

Why 0.7.4 was superseded

The 0.7.4 tag workflow did not pass repository secrets into its reusable desktop-build
workflow, so its macOS asset was ad-hoc signed and not notarized. That release is marked
as superseded. Use 0.7.5 on every platform.

Other platforms

Linux and Windows application behaviour is unchanged from 0.7.3. Windows remains
unsigned and may still trigger SmartScreen.

Verification

The release job verifies the Developer ID signature, Team ID, hardened runtime,
microphone entitlement, stapled notarization ticket and Gatekeeper acceptance. It also
extracts the ZIP and verifies the app again before publishing the DMG, ZIP and checksums.

After downloading, compare the asset with SHA256SUMS.txt from this release.

Assets 9
Loading