Wattle Notes 0.1.10 — macOS bundle signing fix

Fixes the macOS “app is damaged” packaging fault in the 0.1.9 alpha.

The previous ZIP was intact, but its app had only the executable’s linker signature rather than a complete signed bundle. This release explicitly ad-hoc signs the full app, sealing its Info.plist and resources. Release preparation now rejects an invalid bundle before staging either the ZIP or the signed updater. The archive verifier also checks a fresh ZIP extraction with macOS codesign; regression tests reject executable-only signing and changed resources even when archive checksums match.

The app is not Apple Developer ID signed or notarized. macOS may still require approval through System Settings → Privacy & Security → Open Anyway. Ad-hoc signing fixes bundle integrity; it does not establish an Apple-verified publisher. Do not disable Gatekeeper to install it. See Apple’s instructions.

Retains the SQLite 3.53.2, Rustls 0.23.46, Linux GLib backport and updater security fixes. Google sign-in is built in. The existing updater trust key, notebook locations and formats are retained. Install numeric version 0.1.10 through App updates or download the new Mac ZIP.

Mostly vibe coded with AI assistance. macOS Apple Silicon developer alpha. Matching source is GPL-3.0-or-later; local continuity files, private build inputs and website files are excluded.