Reproducible native installer builds (Apple Silicon + Windows) via GitHub Actions#534

Merged

fdb merged 13 commits into

ci/reproducible-native-builds

Jun 14, 2026

Commits on Jun 14, 2026

Add reproducible native installer builds via GitHub Actions

fdb
and
claude
committed
Fix dist-mac resource-dir and make packaging fail loudly

fdb
and
claude
committed
Replace bundled macOS ffmpeg with native arm64 build

fdb
and
claude
committed
docs: update ffmpeg note now that the arm64 binary is bundled

fdb
and
claude
committed
ci: add signing/notarization verification step; temporarily build PR branch

fdb
and
claude
committed
ci: harden keychain setup for codesign + print available identities

fdb
and
claude
committed
ci: print Apple notary log when notarization is not accepted

fdb
and
claude
committed
Fix notarization: stop signing the app bundle with --deep

fdb
and
claude
committed
Fix notarization: build dmg with hdiutil, not jpackage

fdb
and
claude
committed
Fix notarization: sign native libs inside nodebox.jar

fdb
and
claude
committed
Bump Jython to 2.7.4 (modern-SDK natives) + add signing verifier

fdb
and
claude
committed
ci: drop temporary PR-branch trigger now that the pipeline is verified

fdb
and
claude
committed
ci: move JS actions to Node 24; quiet brew ant warning

fdb
and
claude
committed