Use electron-builder-notarize for Mac app notarization

#build

.github/workflows/build.yml

@@ -21,6 +21,13 @@ jobs:
         with:
           node-version: 18
       
+      - name: Prepare for app notarization
+        if: startsWith(matrix.os, 'macos')
+        # Import Apple API key for app notarization on macOS
+        run: |
+          mkdir -p ~/private_keys/
+          echo '${{ secrets.apple_api_key }}' > ~/private_keys/AuthKey_${{ secrets.apple_api_key_id }}.p8
+
       - name: Build/release Electron app
         uses: samuelmeuli/action-electron-builder@v1
         with:
@@ -42,8 +49,9 @@ jobs:
           # release the app after building
           release: ${{ startsWith(github.ref, 'refs/tags/v') }}
         env:
-          APPLE_ID: ${{ secrets.api_key_id }}
-          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.app_specific_password }}
+          # macOS notarization API key
+          API_KEY_ID: ${{ secrets.apple_api_key_id }}
+          API_KEY_ISSUER_ID: ${{ secrets.apple_api_key_issuer_id }}
       
       - name: Upload Mac artifact
         if: ${{ matrix.os == 'macos-latest' }}

electron-builder.json5

@@ -13,6 +13,7 @@
     "dist-electron",
     "dist"
   ],
+  "afterSign": "electron-builder-notarize",
   "mac": {
     "artifactName": "${productName}_${version}_${arch}.${ext}",
     "target": [

package.json

@@ -50,7 +50,8 @@
     "codemirror": "^6.0.1",
     "debounce": "^1.2.1",
     "electron": "^22.0.2",
-    "electron-builder": "^24.0.0",
+    "electron-builder": "^23.6.0",
+    "electron-builder-notarize": "^1.5.1",
     "electron-store": "^8.1.0",
     "fs-jetpack": "^5.1.0",
     "prettier": "^2.8.4",