Try to get Mac singning and notarization working in github action

#build

.github/workflows/build.yml

@@ -34,9 +34,16 @@ jobs:
           # (No need to define this secret in the repo settings)
           github_token: ${{ secrets.github_token }}
 
+          # Used for mac signing
+          mac_certs: ${{ secrets.mac_certs }}
+          mac_certs_password: ${{ secrets.mac_certs_password }}
+
           # If the commit is tagged with a version (e.g. "v1.0.0"),
           # release the app after building
           release: ${{ startsWith(github.ref, 'refs/tags/v') }}
+        env:
+          APPLE_ID: ${{ secrets.api_key_id }}
+          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.app_specific_password }}
       
       - name: Upload Mac artifact
         if: ${{ matrix.os == 'macos-latest' }}

.gitignore

@@ -3,3 +3,4 @@ bundle.js
 dist
 dist-electron
 release
+.env

build/entitlements.mac.plist

@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+	<dict>
+		<key>com.apple.security.cs.allow-jit</key>
+		<true/>
+		<key>com.apple.security.cs.allow-dyld-environment-variables</key>
+		<true/>
+		<key>com.apple.security.inherit</key>
+		<true/>
+		<key>com.apple.security.network.client</key>
+    	<true/>
+	</dict>
+</plist>

electron-builder.json5

@@ -24,6 +24,8 @@
         ]
       }
     ],
+    "publish": ["github"],
+    "category": "public.app-category.productivity",
   },
   "win": {
     "target": [

package.json

@@ -1,6 +1,6 @@
 {
   "name": "Heynote",
-  "version": "1.0.0-dev",
+  "version": "1.0.0",
   "main": "dist-electron/main/index.js",
   "description": "A dedicated scratch pad",
   "author": "Jonatan Heyman (https://heyman.info)",
@@ -23,7 +23,8 @@
     "build": "vue-tsc --noEmit && vite build && electron-builder -c electron-builder.json5",
     "prebuild": "vue-tsc --noEmit && vite build",
     "preview": "vite preview",
-    "build_grammar": "lezer-generator src/editor/lang-heynote/heynote.grammar -o src/editor/lang-heynote/parser.js"
+    "build_grammar": "lezer-generator src/editor/lang-heynote/heynote.grammar -o src/editor/lang-heynote/parser.js",
+    "publish": "set -a && source .env && electron-builder -c electron-builder.json5 --publish always"
   },
   "devDependencies": {
     "@codemirror/commands": "^6.1.2",
@@ -49,7 +50,7 @@
     "codemirror": "^6.0.1",
     "debounce": "^1.2.1",
     "electron": "^22.0.2",
-    "electron-builder": "^23.6.0",
+    "electron-builder": "^24.0.0",
     "electron-store": "^8.1.0",
     "fs-jetpack": "^5.1.0",
     "prettier": "^2.8.4",