fix: ad-hoc sign the whole macOS app bundle

CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.1.1] - 2026-11-06
+
+### Fixed
+
+- The macOS app has a valid ad-hoc signature on the whole app bundle. Before, only the binary had a signature, so `codesign --verify` rejected the app.
+
 ## [1.1.0] - 2026-11-06
 
 ### Added
@@ -46,7 +52,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - A content security policy for the app's windows, and an absolute path required for the `tsk` binary in Settings.
 
-[Unreleased]: https://github.com/s3rgiosan/tskdeck/compare/1.1.0...HEAD
+[Unreleased]: https://github.com/s3rgiosan/tskdeck/compare/1.1.1...HEAD
+[1.1.1]: https://github.com/s3rgiosan/tskdeck/compare/1.1.0...1.1.1
 [1.1.0]: https://github.com/s3rgiosan/tskdeck/compare/1.0.1...1.1.0
 [1.0.1]: https://github.com/s3rgiosan/tskdeck/compare/1.0.0...1.0.1
 [1.0.0]: https://github.com/s3rgiosan/tskdeck/releases/tag/1.0.0

README.md

@@ -44,15 +44,15 @@ Download the installer for your platform from the [Releases](https://github.com/
 - Linux: the `.AppImage` or `.deb`.
 - Windows: the `.msi`.
 
-Releases are unsigned.
+Releases are not notarized or code-signed by a publisher. The macOS app has an ad-hoc signature only.
 
 ### Updates
 
 tskdeck looks for a newer release one minute after launch, and then once a day. When it finds one, a card at the foot of the sidebar shows **Install and Relaunch** and **Later**. To check at once, choose **Check for Updates…** in the app menu on macOS, or in the command palette. To stop the automatic checks, clear **Check for updates automatically** in Settings → General.
 
-### Opening the unsigned app on macOS
+### Opening the app on macOS
 
-Move `tskdeck.app` to `/Applications`, then either right-click it and choose Open, or remove the quarantine flag:
+The macOS build is ad-hoc signed and not notarized, so macOS says that it is damaged on first launch. Move `tskdeck.app` to `/Applications`, then remove the quarantine flag:
 
 ```sh
 xattr -dr com.apple.quarantine /Applications/tskdeck.app

package.json

@@ -1,7 +1,7 @@
 {
   "name": "tskdeck",
   "private": true,
-  "version": "1.1.0",
+  "version": "1.1.1",
   "type": "module",
   "scripts": {
     "dev": "vite",

src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "tskdeck"
-version = "1.1.0"
+version = "1.1.1"
 description = "Unofficial desktop client for the tsk task board"
 authors = ["Sérgio Santos"]
 edition = "2024"

src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "tskdeck",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "identifier": "com.s3rgiosan.tskdeck",
   "build": {
     "beforeDevCommand": "npm run dev",

src-tauri/tauri.macos.conf.json

@@ -24,6 +24,7 @@
       "dmg"
     ],
     "macOS": {
+      "signingIdentity": "-",
       "files": {
         "Resources/Assets.car": "./icons/Assets.car"
       }