From b6dbb360ec76831aaec8e0f28aa481206347ef61 Mon Sep 17 00:00:00 2001 From: kate hollenbach Date: Fri, 24 Apr 2026 17:08:01 -0700 Subject: [PATCH] add codesign verify step for mac builds and use verbose output so that during release actions, someone can get a little info to debug the issue even if they don't have a mac. this ended up being implemented in the gradle build file instead of the release.yml file, because the Build with Gradle step (which is `./gradlew packageDistributionForCurrentOS`) includes both signing and notarization. to stop the build early if the app signing failed, the intervening check had to be inserted into the normal build process. --- app/build.gradle.kts | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/app/build.gradle.kts b/app/build.gradle.kts index 4f91e6d98..c3c1629aa 100644 --- a/app/build.gradle.kts +++ b/app/build.gradle.kts @@ -390,6 +390,25 @@ afterEvaluate{ } } +val verifySignedMacApp = tasks.register("verifySignedMacApp") { + onlyIf { OperatingSystem.current().isMacOsX } + dependsOn("createDistributable") + group = "compose desktop" + + commandLine( + "codesign", + "-vvv", + "--deep", + "--strict", + layout.buildDirectory.dir("compose/binaries/main/app/Processing.app").get().asFile.absolutePath + ) +} + +afterEvaluate { + tasks.named("notarizeDmg").configure { + dependsOn(verifySignedMacApp) + } +} // LEGACY TASKS // Most of these are shims to be compatible with the old build system