Mirroring Nudge's pins left us multiple majors behind. Bump to current:
- actions/checkout v4.1.7 → v6.0.2 (2 majors)
- actions/upload-artifact v4.3.4 → v7.0.1 (3 majors)
- apple-actions/import-codesign-certs v3.0.0 → v7.0.0 (4 majors)
- softprops/action-gh-release v0.1.15 → v3.0.0
- metcalfc/changelog-generator v4.1 → v4.7.0
apple-actions/import-codesign-certs v5.0.0 removed the -A flag during
cert import; v5.0.1 restored pkgbuild access. v7.0.0 has both fixes,
so this is safe for our two-cert + munkipkg flow.
All other v5/v6/v7 upgrades are runtime / Node version bumps with no
behavioral changes affecting our usage.
* 2025 updates try 2
no _logic_ changes, just version bumps and 3.13 support/default - some commented-out _potential_ fixes and explanatory text
* copy pasta
3.13
* undo commented-outs
revorted
* moar copy-pasta
😅
* Update to Python 3.9.10 and update libs
* Fix tokenize-rt version as 4.2.0 was yanked
* PyObjC doesn't seem universal anymore, trying to force a build
* Let's upgrade to latest release of PyObjC
* Update release notes to reflect PyObjC change
Co-authored-by: Nate Walck <nw@stairwell.com>
Co-authored-by: Erik Gomez <e@eriknicolasgomez.com>
fix the notary issues
* more fixes
* do the bin version not current since current is a symlink
* add a bunch more things now
* preserve_xattr in munki-pkg signed package
* try and debug things with spctl
* change the order of the code signing
* paths are still technically wrong but this works already
* Update to Python 3.9.10 and update libs
* Fix tokenize-rt version as 4.2.0 was yanked
* PyObjC doesn't seem universal anymore, trying to force a build
* Let's upgrade to latest release of PyObjC
* Update release notes to reflect PyObjC change
* Combined dependabot and docklib PRs
* Update requests to 2.25.1
* Add additional debug output when archs do not match
* Update PyYAML to 5.4.1
* Update Python to 3.9.5
* Update github action to do python 3.9.5
* Fix MACOS_VERSION name as they now use 11 upstream instead of 11.0
* Trying minimal to confirm that works
* First stab at updating all recommended libs, will need another pr
* Fix lib versions
* Requests was unhappy with idna 3, reverting to 2.x
* Revert pyobjc to 7.0.1
* force compilation for items that lack a universal binary
* bad copy pasta
* Update release description
* Only create a release and upload signed packages if on main
* try some more fixes
Co-authored-by: erikg <e@eriknicolasgomez.com>
Erik Gomez
