You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
macOS arm64 prebuild shipped with an invalid code signature. The release workflow runs pkg-prebuilds-copy --strip, which on macOS runs strip -Sx on the addon. strip rewrites the Mach-O and invalidates the ad-hoc signature the linker applied, and it does not re-sign. arm64 macOS refuses to load unsigned code, so require('ata-validator') was killed with SIGKILL (Code Signature Invalid). The workflow now re-signs and verifies the macOS prebuild after strip, and codesign --verify gates the job so a broken signature cannot ship. Fixes #23.
macOS x64 prebuild was never produced. The prebuild matrix used macos-14 for the x64 leg, but macos-14 runners are Apple Silicon only. The leg now runs on macos-13, the Intel runner.
Changed
prepublishOnly now blocks tarballs missing platform prebuilds, and verifies the darwin code signatures when publishing from a Mac.