Revert main to v0.46.7 runtime baseline

.github/workflows/ci.yml

@@ -54,7 +54,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 22.12.0
+          node-version: 20
           cache: npm
           cache-dependency-path: app/package-lock.json
 
@@ -116,7 +116,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 22.12.0
+          node-version: 20
           cache: npm
           cache-dependency-path: app/package-lock.json
 

.github/workflows/codeql.yml

@@ -48,7 +48,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 22.12.0
+          node-version: 20
           cache: npm
           cache-dependency-path: app/package-lock.json
 
@@ -73,7 +73,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 22.12.0
+          node-version: 20
           cache: npm
           cache-dependency-path: app/package-lock.json
 

.github/workflows/pr-ci.yml

@@ -52,7 +52,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 22.12.0
+          node-version: 20
           cache: npm
           cache-dependency-path: app/package-lock.json
 
@@ -114,7 +114,7 @@ jobs:
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 22.12.0
+          node-version: 20
           cache: npm
           cache-dependency-path: app/package-lock.json
 

.github/workflows/release.yml

@@ -95,7 +95,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version: 22.12.0
+          node-version: 22
           cache: npm
           cache-dependency-path: app/package-lock.json
 

CMakeLists.txt

@@ -1,5 +1,5 @@
 cmake_minimum_required(VERSION 3.24)
-project(metalsharp VERSION 0.49.0 LANGUAGES C CXX OBJC OBJCXX)
+project(metalsharp VERSION 0.46.7 LANGUAGES C CXX OBJC OBJCXX)
 
 set(CMAKE_CXX_STANDARD 20)
 set(CMAKE_CXX_STANDARD_REQUIRED ON)

app/build/notarize.cjs

@@ -1,5 +1,4 @@
 const path = require("node:path");
-const { execFileSync } = require("node:child_process");
 const { notarize } = require("@electron/notarize");
 
 function hasPasswordCredentials() {
@@ -10,25 +9,11 @@ function hasApiKeyCredentials() {
   return Boolean(process.env.APPLE_API_KEY && process.env.APPLE_API_KEY_ID && process.env.APPLE_API_ISSUER);
 }
 
-function adhocSignApp(appPath) {
-  const entitlements = path.join(__dirname, "entitlements.mac.plist");
-  const args = ["--force", "--deep", "--sign", "-", "--options", "runtime"];
-  if (entitlements) {
-    args.push("--entitlements", entitlements);
-  }
-  args.push(appPath);
-
-  execFileSync("/usr/bin/codesign", args, { stdio: "inherit" });
-  execFileSync("/usr/bin/codesign", ["--verify", "--deep", "--strict", "--verbose=4", appPath], { stdio: "inherit" });
-}
-
 exports.default = async function notarizeMetalSharp(context) {
   if (context.electronPlatformName !== "darwin") {
     return;
   }
 
-  const appName = context.packager.appInfo.productFilename;
-  const appPath = path.join(context.appOutDir, `${appName}.app`);
   const requireNotarization = process.env.METALSHARP_REQUIRE_NOTARIZATION === "1";
   if (!hasPasswordCredentials() && !hasApiKeyCredentials()) {
     const message =
@@ -37,11 +22,11 @@ exports.default = async function notarizeMetalSharp(context) {
       throw new Error(message);
     }
     console.log(message);
-    console.log("Apple Developer ID unavailable; applying ad-hoc app bundle signature for local Gatekeeper integrity.");
-    adhocSignApp(appPath);
     return;
   }
 
+  const appName = context.packager.appInfo.productFilename;
+  const appPath = path.join(context.appOutDir, `${appName}.app`);
   const baseOptions = {
     appBundleId: context.packager.appInfo.appId,
     appPath,