I've also added even more robustness to the macOS signing, including using, or dropping, EPM as required.
Also, to support our traditional community build workflow where different machines _build_ the images than the one that _signs_ them, I've gone ahead and added a support script to our devtools/release-scripts to support that. So we should be able to sign both when building as well as after the fact. PS: As a reminder, this is just for 5.0.x and above, since the 4.1.x builds use a too-old version of Xcode for full signing _and_ notary/stapling > On Sep 10, 2026, at 1:15 PM, Jim Jagielski <[email protected]> wrote: > > I went ahead and did that, as well as found and patched a few bugs. Folded > into trunk and backported to AOO50X. > >> On Sep 10, 2026, at 5:14 AM, Jim Jagielski <[email protected]> wrote: >> >> Is there any way you could pull out just the signing bits into a separate >> commit? >> >>> On Sep 10, 2026, at 12:26 AM, [email protected] wrote: >>> >>> >> -- Jim "We are havin' it large!" Tony Harrison
