From cd9e8a137f104f9199494940e6b659ad12940ad5 Mon Sep 17 00:00:00 2001 From: Steven Enamakel Date: Sun, 29 Mar 2026 22:37:24 -0700 Subject: [PATCH] Refactor release workflow and update environment variables - Commented out macOS ARM64 build configurations in the release workflow to streamline the process. - Updated the environment variable for the backend URL from `VITE_BACKEND_URL` to `BASE_URL` for consistency. - Ensured proper handling of Apple certificate and password secrets in the build environment, enhancing security and clarity. - Improved the deployment target configuration for macOS builds, ensuring compatibility with the latest requirements. --- .github/workflows/release.yml | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a1c4f08ec..fb125c826 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -209,14 +209,14 @@ jobs: fail-fast: false matrix: settings: - - platform: macos-latest - args: --target aarch64-apple-darwin - target: aarch64-apple-darwin - artifact_suffix: aarch64-apple-darwin - - platform: macos-latest - args: --target x86_64-apple-darwin - target: x86_64-apple-darwin - artifact_suffix: x86_64-apple-darwin + # - platform: macos-latest + # args: --target aarch64-apple-darwin + # target: aarch64-apple-darwin + # artifact_suffix: aarch64-apple-darwin + # - platform: macos-latest + # args: --target x86_64-apple-darwin + # target: x86_64-apple-darwin + # artifact_suffix: x86_64-apple-darwin - platform: ubuntu-22.04 args: --target x86_64-unknown-linux-gnu target: x86_64-unknown-linux-gnu @@ -328,7 +328,7 @@ jobs: run: yarn build env: NODE_ENV: production - VITE_BACKEND_URL: ${{ vars.VITE_BACKEND_URL }} + VITE_BACKEND_URL: ${{ vars.BASE_URL }} VITE_SENTRY_DSN: ${{ vars.VITE_SENTRY_DSN }} VITE_DEBUG: ${{ vars.VITE_DEBUG }} @@ -390,17 +390,17 @@ jobs: uses: tauri-apps/tauri-action@v0.6.2 id: tauri-build env: - APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE_BASE64 }} APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }} - APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }} + APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE_BASE64 }} APPLE_ID: ${{ secrets.APPLE_ID }} - APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }} + APPLE_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }} + APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }} APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }} BASE_URL: ${{ vars.BASE_URL }} - TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY || secrets.UPDATER_PRIVATE_KEY }} - TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD || secrets.UPDATER_PRIVATE_KEY_PASSWORD }} - WITH_UPDATER: "true" MACOSX_DEPLOYMENT_TARGET: ${{ matrix.settings.platform == 'macos-latest' && '10.15' || '' }} + TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD || secrets.UPDATER_PRIVATE_KEY_PASSWORD }} + TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY || secrets.UPDATER_PRIVATE_KEY }} + WITH_UPDATER: "true" with: projectPath: app # Tools discovery now uses a JS mock registry (no Rust discovery