From 9099ca3fcb09930e85d356613ada41968b41426d Mon Sep 17 00:00:00 2001 From: James Coleman Date: Tue, 29 Sep 2026 14:35:59 -0500 Subject: [PATCH] build(macos): wait up to an hour for notarization in the release build - The Docker release build gave up on Apple's notary service after rcodesign's default ten minutes, which failed the release and left the app and disk image unnotarized, so Gatekeeper rejected the download until the user allowed it in Privacy & Security. - Apple holds a team's first submissions for longer; the build now waits up to an hour for the verdict before stapling. --- packaging/macos/bundle.sh | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/packaging/macos/bundle.sh b/packaging/macos/bundle.sh index 7269b72..e7c2f5e 100755 --- a/packaging/macos/bundle.sh +++ b/packaging/macos/bundle.sh @@ -209,7 +209,9 @@ notarize() { fi xcrun stapler staple "$1" >&2 else - rcodesign notary-submit --api-key-file "$api_key" --staple "$1" >&2 + # An hour rather than rcodesign's ten minutes: Apple holds a team's first submissions for + # longer, and a release that stops waiting is left unnotarized. + rcodesign notary-submit --api-key-file "$api_key" --max-wait-seconds 3600 --staple "$1" >&2 fi }