ci: zip hack for .app

Author: 0xbrayo

.github/workflows/release.yml

@@ -161,6 +161,7 @@ jobs:
           APP_PATH="src-tauri/target/release/bundle/macos/gptme-tauri.app"
           DMG_DIR="src-tauri/target/release/bundle/dmg"
           DMG_PATH="$DMG_DIR/gptme-tauri_${{ matrix.arch }}.dmg"
+          ZIP_PATH="$DMG_DIR/gptme-tauri_${{ matrix.arch }}.app.zip"
           mkdir -p "$DMG_DIR"
 
           echo "Signing app bundle at $APP_PATH"
@@ -192,41 +193,59 @@ jobs:
           echo "Signing DMG file"
           codesign --force -s "$APPLE_SIGNING_IDENTITY" --keychain build.keychain "$DMG_PATH"
 
-          echo "App and DMG signed successfully"
+          echo "Creating ZIP archive of .app bundle"
+          # Zip the .app bundle for distribution
+          ditto -c -k --keepParent "$APP_PATH" "$ZIP_PATH"
 
-      # - name: Notarize macOS app (optional)
-      #   if: matrix.platform == 'macos-latest' && (startsWith(github.ref, 'refs/tags/') || github.event.inputs.sign == 'true')
-      #   env:
-      #     APPLE_ID: ${{ secrets.APPLE_ID }}
-      #     APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
-      #     APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
-      #   run: |
-      #     if [ -z "$APPLE_ID" ] || [ -z "$APPLE_ID_PASSWORD" ] || [ -z "$APPLE_TEAM_ID" ]; then
-      #       echo "Warning: Apple notarization credentials not available. Skipping notarization."
-      #       exit 0
-      #     fi
+          # Sign the ZIP file (optional but recommended)
+          codesign --force -s "$APPLE_SIGNING_IDENTITY" --keychain build.keychain "$ZIP_PATH"
 
-      #     # Use the same DMG path as defined in the sign step
-      #     echo "Using DMG path for notarization: $DMG_PATH"
+          echo "App, DMG, and ZIP archive created and signed successfully"
 
-      #     echo "Uploading DMG for notarization"
-      #     xcrun notarytool submit "$DMG_PATH" \
-      #       --apple-id "$APPLE_ID" \
-      #       --password "$APPLE_ID_PASSWORD" \
-      #       --team-id "$APPLE_TEAM_ID" \
-      #       --wait
+      - name: Notarize macOS app (optional)
+        if: matrix.platform == 'macos-latest' && (startsWith(github.ref, 'refs/tags/') || github.event.inputs.sign == 'true')
+        env:
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+        run: |
+          if [ -z "$APPLE_ID" ] || [ -z "$APPLE_ID_PASSWORD" ] || [ -z "$APPLE_TEAM_ID" ]; then
+            echo "Warning: Apple notarization credentials not available. Skipping notarization."
+            exit 0
+          fi
+
+          # Use the same DMG and ZIP paths as defined in the sign step
+          echo "Using DMG path for notarization: $DMG_PATH"
+          echo "Using ZIP path for notarization: $ZIP_PATH"
+
+          echo "Uploading DMG for notarization"
+          xcrun notarytool submit "$DMG_PATH" \
+            --apple-id "$APPLE_ID" \
+            --password "$APPLE_ID_PASSWORD" \
+            --team-id "$APPLE_TEAM_ID" \
+            --wait
+
+          echo "Stapling notarization ticket to DMG"
+          xcrun stapler staple "$DMG_PATH"
+
+          echo "Uploading ZIP for notarization"
+          xcrun notarytool submit "$ZIP_PATH" \
+            --apple-id "$APPLE_ID" \
+            --password "$APPLE_ID_PASSWORD" \
+            --team-id "$APPLE_TEAM_ID" \
+            --wait
 
-      #     echo "Stapling notarization ticket to DMG"
-      #     xcrun stapler staple "$DMG_PATH"
+          echo "Stapling notarization ticket to ZIP"
+          xcrun stapler staple "$ZIP_PATH"
 
-      #     echo "Notarization complete"
+          echo "Notarization complete for both DMG and ZIP"
 
       - name: Upload macOS binaries to release
         if: matrix.platform == 'macos-latest' && startsWith(github.ref, 'refs/tags/')
         uses: softprops/action-gh-release@v1
         with:
           files: |
-            src-tauri/target/release/bundle/macos/gptme-tauri.app
+            src-tauri/target/release/bundle/dmg/gptme-tauri_${{ matrix.arch }}.app.zip
             src-tauri/target/release/bundle/dmg/gptme-tauri_${{ matrix.arch }}.dmg
           tag_name: ${{ github.ref_name }}
           name: gptme-tauri ${{ github.ref_name }}