From 4fa816801c283a56fabf3afff735c2d1967cdbb6 Mon Sep 17 00:00:00 2001 From: dinex-dev Date: Mon, 8 Jun 2026 17:32:50 +0530 Subject: [PATCH 1/2] chore(dev): point workflow at dev repo's MAC_CERTS + allow dispatch from dev branch MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Two minimal edits on the prod workflow we just synced over: 1. mac_certs / mac_certs_password now read from secrets.MAC_CERTS / MAC_CERTS_PASSWORD (the dev repo's known-good pair, last refreshed 2025-12-07) instead of secrets.bstack_mac_certs / bstack_mac_certs_password (which only exist on prod, and the prod copies are the broken pair that produced the MAC verification / notarize failures we're debugging). 2. Branch guard now also allows refs/heads/dev so workflow_dispatch from the dev branch actually fires steps instead of skipping silently. This is a dev-only adjustment — the prod workflow stays as-is. Iteration playground only; do not merge upstream. --- .github/workflows/release_desktop_app.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release_desktop_app.yml b/.github/workflows/release_desktop_app.yml index 51f37b6..72c4166 100644 --- a/.github/workflows/release_desktop_app.yml +++ b/.github/workflows/release_desktop_app.yml @@ -42,7 +42,7 @@ jobs: APPLE_ID: ${{ secrets.APPLE_ID }} APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }} - if: github.ref == 'refs/heads/master'|| github.ref == 'refs/heads/production' + if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/production' || github.ref == 'refs/heads/dev' runs-on: ${{ github.event.inputs.build_type }} steps: @@ -148,8 +148,8 @@ jobs: github_token: ${{ secrets.publish_token }} package_root: "." - mac_certs: ${{ secrets.bstack_mac_certs }} - mac_certs_password: ${{ secrets.bstack_mac_certs_password }} + mac_certs: ${{ secrets.MAC_CERTS }} + mac_certs_password: ${{ secrets.MAC_CERTS_PASSWORD }} # windows_certs / windows_certs_password intentionally removed. # Windows codesigning now happens inside electron-builder via the From ee02d9dbbf6d929a681d4dae0f10869bd384a690 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Jun 2026 12:03:48 +0000 Subject: [PATCH 2/2] build(deps-dev): bump launch-editor from 2.6.0 to 2.14.1 Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.6.0 to 2.14.1. - [Commits](https://github.com/vitejs/launch-editor/compare/v2.6.0...v2.14.1) --- updated-dependencies: - dependency-name: launch-editor dependency-version: 2.14.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- package-lock.json | 40 ++++++++++++++++++++++++++-------------- 1 file changed, 26 insertions(+), 14 deletions(-) diff --git a/package-lock.json b/package-lock.json index bb24627..57b7e26 100644 --- a/package-lock.json +++ b/package-lock.json @@ -13065,12 +13065,13 @@ } }, "node_modules/launch-editor": { - "version": "2.6.0", + "version": "2.14.1", + "resolved": "https://registry.npmjs.org/launch-editor/-/launch-editor-2.14.1.tgz", + "integrity": "sha512-QWBrQsMpH7gPr965dsKD/3cKWiNoTjpATQf++Xq63N6sKRGMwlVXz41O1IZTMfZQgBctD/K5Zt06+/I6pP6+HA==", "dev": true, - "license": "MIT", "dependencies": { - "picocolors": "^1.0.0", - "shell-quote": "^1.7.3" + "picocolors": "^1.1.1", + "shell-quote": "^1.8.4" } }, "node_modules/lazy-val": { @@ -14868,9 +14869,10 @@ } }, "node_modules/picocolors": { - "version": "1.0.0", - "dev": true, - "license": "ISC" + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz", + "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==", + "dev": true }, "node_modules/picomatch": { "version": "2.3.1", @@ -16757,8 +16759,12 @@ } }, "node_modules/shell-quote": { - "version": "1.8.1", - "license": "MIT", + "version": "1.8.4", + "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.4.tgz", + "integrity": "sha512-VsC6n6vz1ihYYyZZwX7YZSF5l5x36ca17OC+a69h94YqB7X6XLwf+5MOgynYir2SLFUbl8gIYvBo8K8RoNQ6bQ==", + "engines": { + "node": ">= 0.4" + }, "funding": { "url": "https://github.com/sponsors/ljharb" } @@ -28369,11 +28375,13 @@ "dev": true }, "launch-editor": { - "version": "2.6.0", + "version": "2.14.1", + "resolved": "https://registry.npmjs.org/launch-editor/-/launch-editor-2.14.1.tgz", + "integrity": "sha512-QWBrQsMpH7gPr965dsKD/3cKWiNoTjpATQf++Xq63N6sKRGMwlVXz41O1IZTMfZQgBctD/K5Zt06+/I6pP6+HA==", "dev": true, "requires": { - "picocolors": "^1.0.0", - "shell-quote": "^1.7.3" + "picocolors": "^1.1.1", + "shell-quote": "^1.8.4" } }, "lazy-val": { @@ -29593,7 +29601,9 @@ } }, "picocolors": { - "version": "1.0.0", + "version": "1.1.1", + "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz", + "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==", "dev": true }, "picomatch": { @@ -30782,7 +30792,9 @@ "version": "3.0.0" }, "shell-quote": { - "version": "1.8.1" + "version": "1.8.4", + "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.4.tgz", + "integrity": "sha512-VsC6n6vz1ihYYyZZwX7YZSF5l5x36ca17OC+a69h94YqB7X6XLwf+5MOgynYir2SLFUbl8gIYvBo8K8RoNQ6bQ==" }, "shimmer": { "version": "1.2.1",