Jay Wu ea7b6f06b5 ci: apply macOS stapling workaround before packaging app (#10661) ...

The pfctl rule that blocks QUIC (UDP 443) was only applied before the
Inso CLI stapling step. The app packaging step also staples through
https://api.apple-cloudkit.com and hits the same issue, so run the
workaround before "Package app (MacOS only)" instead.

Ref: actions/runner-images#14924

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
(cherry picked from commit d94f8dbf72)

2026-10-27 11:09:01 +00:00

..

homebrew.yml

Add harden-runner to all CI workflows (#10300)

2026-08-04 19:18:10 +02:00

ksai.yml

ci(ksai): start a KSAI run only for people who can write to the repository (#10578)

2026-10-09 07:04:27 +08:00

release-build.yml

ci: apply macOS stapling workaround before packaging app (#10661)

2026-10-27 11:09:01 +00:00

release-publish.yml

fix: pin kong/release-script docker action to a digest (#10449)

2026-10-15 16:58:40 +00:00

release-recurring.yml

fix: set persist-credentials: false on non-pushing actions/checkout steps (#10447)

2026-09-01 14:28:44 +00:00

release-start.yml

fix: set persist-credentials: false on non-pushing actions/checkout steps (#10447)

2026-09-01 14:28:44 +00:00

sast.yml

fix: set persist-credentials: false on non-pushing actions/checkout steps (#10447)

2026-09-01 14:28:44 +00:00

test-cli.yml

fix: set persist-credentials: false on non-pushing actions/checkout steps (#10447)

2026-09-01 14:28:44 +00:00

test-e2e.yml

feat: e2e re-run only fails (#10457)

2026-09-02 08:17:14 +00:00

test.yml

chore(ci): make the cycle check runnable on Windows and report drift honestly (#10548)

2026-09-24 02:58:59 +00:00

update-changelog.yml

Add harden-runner to all CI workflows (#10300)

2026-08-04 19:18:10 +02:00