build(macos): wait up to an hour for notarization in the release build

- The Docker release build gave up on Apple's notary service after rcodesign's default ten minutes, which failed the release and left the app and disk image unnotarized, so Gatekeeper rejected the download until the user allowed it in Privacy & Security.
- Apple holds a team's first submissions for longer; the build now waits up to an hour for the verdict before stapling.
This commit is contained in:
James Coleman 2026-09-29 14:35:59 -05:00
parent ebe6302baf
commit 9099ca3fcb

View file

@ -209,7 +209,9 @@ notarize() {
fi fi
xcrun stapler staple "$1" >&2 xcrun stapler staple "$1" >&2
else else
rcodesign notary-submit --api-key-file "$api_key" --staple "$1" >&2 # An hour rather than rcodesign's ten minutes: Apple holds a team's first submissions for
# longer, and a release that stops waiting is left unnotarized.
rcodesign notary-submit --api-key-file "$api_key" --max-wait-seconds 3600 --staple "$1" >&2
fi fi
} }