Notarize on macOS

.github/workflows/release_generator.yml

@@ -82,6 +82,20 @@ jobs:
       shell: bash
       run: zip signet_macos signet
 
+    - name: Notarize executable
+      env:
+        APPLE_ID: ${{ secrets.APPLE_NOTARIZE_ID }}
+        APPLE_PASSWORD: ${{ secrets.APPLE_NOTARIZE_PASSWORD }}
+        APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+      working-directory: ${{github.workspace}}/build
+      run:
+        xcrun notarytool submit signet_macos.zip --apple-id "$APPLE_ID" --password "$APPLE_PASSWORD" --team-id "$APPLE_TEAM_ID" --wait
+        rm signet
+        unzip signet_macos.zip
+        rm signet_macos.zip
+        xcrun stapler staple signet
+        zip signet_macos.zip signet
+
     - uses: actions/upload-artifact@v4
       with:
         name: signet_macos.zip

CMakeLists.txt

@@ -8,7 +8,7 @@ set(CMAKE_OSX_ARCHITECTURES
     "x86_64;arm64"
     CACHE STRING "Build universal binary")
 
-project(Signet VERSION 0.1.7)
+project(Signet VERSION 0.1.8)
 
 option(DEPLOYMENT_BUILD "A build for deployment to end-users" NO)
 option(ENABLE_SANITIZERS "Enable ASan and UBSan" OFF)

RELEASE.md

@@ -1,7 +1,12 @@
 There are binaries available for the Windows, Linux (Ubuntu) and Mac versions of Signet. These can be found in the assets section of this Github release. Just download and extract the file to start using it.
 
+The macOS version is a universal binary, codesigned and notarized.
+
 Changes:
 
+0.1.8:
+- Notarize the macOS version
+
 0.1.7:
 - Codesign the macOS version