Skip to content

BUI-249 Tauri auto-update#82

Draft
callumflack wants to merge 10 commits intomainfrom
callum1/bui-249-auto-update-the-app-2
Draft

BUI-249 Tauri auto-update#82
callumflack wants to merge 10 commits intomainfrom
callum1/bui-249-auto-update-the-app-2

Conversation

@callumflack
Copy link
Member

No description provided.

Move the macOS packaging spike evidence down to Track A so the doc reads as
conclusions first and proof near the recommended next step.

Made-with: Cursor
Record the packaging and signature preservation spikes, drop the macOS
resource-copy step, and keep final app signing as the bundle finalization
path.

Made-with: Cursor
Record that the macOS copy-step question is resolved enough to unblock
updater plumbing, and split the next work into a dedicated Track B plan
with exact file targets, release-shape decisions, and verification gates.

Made-with: Cursor
Record the release-flow blocker in the Track B plan and add a custom
post-finalization macOS updater artifact path so the served updater tarball
and signature come from the finalized signed app instead of the earlier Tauri
build output.

Made-with: Cursor
Capture that DMG notarization is not sufficient evidence for the separate
updater tarball path, and that the updater-served app likely needs to be
notarized and stapled before packaging into .app.tar.gz.

Made-with: Cursor
Remove shell xtrace around updater secrets, notarize and staple the
finalized app before packaging the updater tarball, make updater asset names
matrix-safe, and fail the workflow if the extracted updater payload does not
pass stapler, spctl, and codesign validation.

Made-with: Cursor
Link the Track B plan to a small proof-run doc that records the exact
release assets, log markers, pass criteria, and command path for the first
real macOS updater CI validation run.

Made-with: Cursor
Record the first proof-run failure mode, stop tauri-action from uploading
release assets, and keep release publishing in the explicit upload step so
the macOS updater asset contract comes from one path only.

Made-with: Cursor
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant