- Add entitlements.mac.plist for hardened runtime
- Add notarize.js post-sign hook for Apple notarization
- Update package.json with signing config and @electron/notarize dep
- Update GitHub Actions workflow with signing secrets
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* build-arch job now only build arch .pkg.tar.zst package instead of the whole generic linux.
* build-linux job now exclude .pacman package since its deprecated and should not be used.
* fix: update tar to 7.5.6
* test: release on main branch using tag
* chore: remove previous release branch part
* fix: add deps for bsdtar
* fix: fix build tar.zst for arch
* fix: missing npm ci on release yml
* fix: remove pacman package json
* fix: revert tar version
* fix: revert tar in package-lock.json
* Update release.yml
The glob pattern latest*.yml was matching both latest-linux.yml AND
latest.yml from the Linux build, causing the Windows latest.yml to be
overwritten with incorrect checksums.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
