Merge pull request #19 from slaveofcode/develop

release: desktop v1.0.0-beta.1 (all-platform build fixes)

Author: slaveofcode

.github/workflows/deploy.yml

@@ -72,6 +72,9 @@ jobs:
             libxcb1-dev \
             libxcb-randr0-dev \
             libxcb-shm0-dev \
+            libgbm-dev \
+            libegl1-mesa-dev \
+            libgl1-mesa-dev \
             libclang-dev \
             clang \
             pkg-config
@@ -107,13 +110,12 @@ jobs:
           # Updater signing (required — tauri.conf.json declares a pubkey).
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
-          # Code signing — set these secrets in the repo settings
-          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
-          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
-          APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
-          APPLE_ID: ${{ secrets.APPLE_ID }}
-          APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
-          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+          # Apple code signing / notarization is intentionally NOT wired: the
+          # APPLE_* secrets aren't set, and passing empty ones makes tauri-action
+          # attempt `security import` and fail ("failed to import keychain
+          # certificate"). macOS beta builds ship unsigned (Gatekeeper: right-click
+          # → Open). To enable signing, set the APPLE_* secrets (see
+          # RELEASING-DESKTOP.md) and re-add them here.
         with:
           tagName: ${{ github.ref_name }}
           releaseName: 'GoodWebTools Desktop ${{ github.ref_name }}'

.github/workflows/release.yml

@@ -77,7 +77,7 @@
   },
   "bundle": {
     "active": true,
-    "targets": "all",
+    "targets": ["nsis", "app", "dmg", "deb", "appimage"],
     "resources": [],
     "category": "Utility",
     "shortDescription": "Privacy-first client-side tools",