mirror of
https://github.com/NanmiCoder/cc-haha
synced 2026-07-16 13:03:31 +08:00
The current release lane is aimed at manual downloads and command-line usage, not notarized distribution or in-app auto-updates. This change removes Apple certificate import and updater signing from GitHub Actions, and forces release builds to disable updater artifacts so unsigned release bundles can still be produced consistently. Constraint: Repository does not have working Apple signing certs or updater signing keys Rejected: Keep signing requirements and document the secrets problem | blocks every release on infra the project does not plan to maintain Rejected: Remove the GitHub release workflow entirely | still need a repeatable packaging path for downloadable artifacts Confidence: high Scope-risk: moderate Reversibility: clean Directive: If signed distribution or in-app updates are added later, restore signing in workflow together with validated secrets and release metadata Tested: git diff --check; YAML parse of release-desktop workflow; manual inspection that updater artifacts are disabled via tauri.release-ci.json and signing env/steps are removed Not-tested: Live GitHub Actions run after workflow update