feat: Bump package version to "8.4.605" and enhance keychain access for CI

Author: softartdev

.github/scripts/import_macos_dev_id_cert.sh

@@ -12,22 +12,22 @@ if [ ! -f "$KEYCHAIN_PATH" ]; then
 fi
 
 # Add keychain to the search list and make it default for this session
-security list-keychains -s "$KEYCHAIN_PATH" $(security list-keychains | sed 's/[",]//g')
+security list-keychains -s "$KEYCHAIN_PATH"
 security default-keychain -s "$KEYCHAIN_PATH"
 security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
 
 # Import Developer ID certificate and allow all apps to access the private key
 security import "$P12_PATH" \
   -k "$KEYCHAIN_PATH" \
   -P "$LARGE_SECRET_PASSPHRASE" \
-  -A \
   -T /usr/bin/codesign \
   -T /usr/bin/productbuild \
-  -T /usr/bin/security
+  -T /usr/bin/security \
+  -A
 
-# Allow non-interactive access for codesign / productbuild on CI
+# Allow non-interactive access for codesign/productbuild/notarytool on CI
 security set-key-partition-list \
-  -S apple-tool:,apple:,codesign: \
+  -S apple-tool:,apple: \
   -s \
   -k "$KEYCHAIN_PASSWORD" \
-  "$KEYCHAIN_PATH"
+  "$KEYCHAIN_PATH"

.github/workflows/desktop.yaml

@@ -35,6 +35,11 @@ jobs:
         run: ./.github/scripts/import_macos_dev_id_cert.sh
         env:
           LARGE_SECRET_PASSPHRASE: ${{ secrets.LARGE_SECRET_PASSPHRASE }}
+      - name: Debug code signing identities
+        if: matrix.os == 'macos-latest'
+        run: |
+          security list-keychains
+          security find-identity -v -p codesigning "$HOME/Library/Keychains/build.keychain-db"
       - name: Package uberJar
         run: ./gradlew :app:desktop:packageReleaseUberJarForCurrentOS
       - name: Packaging (macOS)

app/desktop/build.gradle.kts

@@ -50,7 +50,7 @@ compose.desktop {
         nativeDistributions {
             targetFormats(TargetFormat.Dmg, TargetFormat.Msi, TargetFormat.Deb)
             packageName = "Note Delight"
-            packageVersion = "8.4.604"
+            packageVersion = "8.4.605"
             description = "Note app with encryption"
             copyright = "© 2023 SoftArtDev"
             macOS.iconFile.set(project.file("src/jvmMain/resources/app_icon.icns"))