Alan Wizemann e0f0fad192 fix(release): post-package verification + non-destructive recovery docs ...

Add codesign --verify --strict --deep + spctl --assess on the extracted
distribution zip inside build_variant() so any seal regression introduced
by ditto / staple / future pipeline tweaks fails the release before users
see "damaged" errors. Document the non-destructive recovery path in
README and explicitly warn against `xattr -rc` and
`codesign --force --deep --sign -` (issue #49 — both corrupt
Sparkle.framework's nested XPC service / Updater.app signatures even
when the outer app remains intact).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-27 11:40:16 +02:00

..

catalog.sh

fix(catalog): accept git worktrees for gh-pages check

2026-04-23 18:37:31 +02:00

ExportOptions.plist

feat: Sparkle auto-updates + Developer ID notarization pipeline

2026-04-16 18:42:20 -07:00

release.sh

fix(release): post-package verification + non-destructive recovery docs

2026-04-27 11:40:16 +02:00

wiki.sh

docs: add GitHub wiki + scripts/wiki.sh helper with secret-scan

2026-04-20 15:32:47 -07:00