LocalAI [bot] dd625921ff fix(macos): staple the notarization ticket to the .app, not just the dmg (#10606) ...

Stapling only the dmg leaves the LocalAI.app bundle with no embedded
notarization ticket. Gatekeeper then falls back to an online notarization
check on first launch, so the app fails to open on a Mac that is offline or
behind a firewall, or once it has been copied out of the dmg — while it keeps
working on the (online) build host, which masks the problem.

Notarize and staple the .app before packaging it into the dmg so the bundle
verifies offline. Adds a `notarize-app` subcommand to
contrib/macos/sign-and-notarize.sh (zips the bundle for notarytool, then
staples + validates) and invokes it from dmg-launcher-darwin. Stays a no-op
when notary secrets are unset, so unsigned local/fork builds are unaffected.

Assisted-by: Claude:claude-opus-4-8 [Claude Code]

Signed-off-by: mudler <mudler@localai.io>
Co-authored-by: Ettore Di Giacinto <mudler@localai.io>

2026-06-30 17:38:47 +02:00

..

Launcher.entitlements

feat(macos): sign and notarize the DMG, app, and server binary (#10510)

2026-06-26 12:45:51 +02:00

sign-and-notarize.sh

fix(macos): staple the notarization ticket to the .app, not just the dmg (#10606)

2026-06-30 17:38:47 +02:00