Skip to content

fix: notarize macOS binary by submitting archive - #458

Open
vladkanatov wants to merge 2 commits into
openai:mainfrom
vladkanatov:main
Open

fix: notarize macOS binary by submitting archive#458
vladkanatov wants to merge 2 commits into
openai:mainfrom
vladkanatov:main

Conversation

@vladkanatov

@vladkanatov vladkanatov commented Aug 4, 2026

Copy link
Copy Markdown

This pull request makes a small configuration change to the .goreleaser.yml file to improve the notarization process for macOS builds.

  • Set the notarization timeout to 20 minutes and enabled wait to ensure the process completes before continuing.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3a619efc3a

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread .goreleaser.yml Outdated
notarize:
macos:
- enabled: '{{ isEnvSet "MACOS_SIGN_P12" }}'
artifacts: archive

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Remove unsupported notarize artifact selector

In the tag-release path I checked (.github/workflows/release.yml runs goreleaser release --clean with version: "~> v2"), this added key makes the GoReleaser config invalid before any release artifacts are produced. GoReleaser’s notarize.macos config supports ids, enabled, sign, and notarize, while its YAML loader enables strict known-field decoding, so artifacts under this section is rejected as an unknown field rather than selecting archives. See the upstream config/docs: https://goreleaser.com/customization/sign/notarize/ and https://raw.githubusercontent.com/goreleaser/goreleaser/main/pkg/config/config.go.

Useful? React with 👍 / 👎.

@vladkanatov

Copy link
Copy Markdown
Author

Notarization didn't finish before the binaries started uploading to GitHub.

@vladkanatov

Copy link
Copy Markdown
Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Security review completed. No security issues were found in this pull request.

Reviewed commit: ba7efdd05e

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Chef's kiss.

Reviewed commit: ba7efdd05e

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

@stefanfessler

Copy link
Copy Markdown

any news here?

@vladkanatov

Copy link
Copy Markdown
Author

There's no news, the binary is still being killed, we're waiting for the maintainers to look at the issue and pR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants