diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index da8f6d607f4..0ee7d49ddf3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -75,6 +75,12 @@ jobs: - name: Verify macOS signing environment if: matrix.platform == 'mac' run: node config/scripts/verify-macos-release-env.mjs + env: + CSC_LINK: ${{ secrets.MAC_CERTS }} + CSC_KEY_PASSWORD: ${{ secrets.MAC_CERTS_PASSWORD }} + APPLE_ID: ${{ secrets.APPLE_ID }} + APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }} + APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }} - name: Build app run: ${{ matrix.build_command }} @@ -97,21 +103,22 @@ jobs: shopt -s nullglob for pattern in \ - "release/*.dmg" \ - "release/*.zip" \ - "release/*.AppImage" \ - "release/*.deb" \ - "release/*.exe" \ - "release/*.blockmap" \ - "release/latest*.yml"; do + "dist/*.dmg" \ + "dist/*.zip" \ + "dist/*.AppImage" \ + "dist/*.deb" \ + "dist/*.exe" \ + "dist/*.blockmap" \ + "dist/latest*.yml"; do for file in $pattern; do cp "$file" release-publish/ done done - # Why: each split macOS build emits a same-named latest-mac.yml. We - # keep the arm64 manifest as canonical and rename the Intel one so the - # publish job can merge both manifests before GitHub sees the assets. + # Why: each split macOS build emits a same-named latest-mac.yml into + # dist/. We keep the arm64 manifest as canonical and rename the Intel + # one so the publish job can merge both manifests before GitHub sees + # the assets. if [[ "${{ matrix.platform }}" == "mac" && "${{ matrix.arch }}" == "x64" ]]; then mv release-publish/latest-mac.yml release-publish/latest-mac-x64.yml fi