Skip to content

Replace mitchellh/go used for macOS notarization #2399

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Merged
merged 2 commits into from
Nov 8, 2023

Conversation

umbynos
Copy link
Contributor

@umbynos umbynos commented Nov 2, 2023

Please check if the PR fulfills these requirements

See how to contribute

  • The PR has no duplicates (please search among the Pull Requests
    before creating one)
  • The PR follows
    our contributing guidelines
  • Tests for the changes have been added (for bug fixes / features)
  • Docs have been added / updated (for bug fixes / features)
  • UPGRADING.md has been updated with a migration guide (for breaking changes)
  • configuration.schema.json updated if new parameters are added.

What kind of change does this PR introduce?

change in tooling see arduino/tooling-project-assets#359

What is the current behavior?

An excellent tool named gon was used to perform the notarization.
the latest stable release of gon uses the altool command-line utility for notarization:
https://github.com/mitchellh/gon/blob/v0.2.5/notarize/upload.go#L41

Using altool for notarization is now deprecated by Apple and support for notarization via this tool is scheduled to be disabled 2023-11-01:
https://developer.apple.com/news/?id=y5mjxqmn

Furthermore, gon was archived

What is the new behavior?

I switched to https://github.com/Bearer/gon that has included mitchellh/gon#72, hoping the maintainers will take the responsibility of maintaining the project.
I added also AC_PROVIDER env var which is mandatory with the new notarytool.

Does this PR introduce a breaking change, and is titled accordingly?

no

Other information

@umbynos umbynos added type: enhancement Proposed improvement topic: infrastructure Related to project infrastructure labels Nov 2, 2023
@umbynos umbynos self-assigned this Nov 2, 2023
@umbynos
Copy link
Contributor Author

umbynos commented Nov 2, 2023

Copy link

@ubidefeo ubidefeo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tested on Ventura, no issues with running

Copy link
Member

@cmaglie cmaglie left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Runs fine if launched from command-line ternimal.
It won't start if double-clicked from file manager and it has quarantine flags set (but the same happens with old releases so I think it's fine?)

@umbynos umbynos merged commit 7a9be52 into arduino:master Nov 8, 2023
umbynos added a commit that referenced this pull request Nov 8, 2023
* switch to gon fork, apple is deprecating altool to sign

* Provider is mandatory
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
topic: infrastructure Related to project infrastructure type: enhancement Proposed improvement
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants