Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -412,7 +412,7 @@ jobs:
run: flutter pub get

- name: Build macOS release
run: flutter build macos --release --no-codesign --build-name "$BUILD_NAME" --build-number "$BUILD_NUMBER"
run: flutter build macos --release --build-name "$BUILD_NAME" --build-number "$BUILD_NUMBER"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Add macOS network entitlement before signing releases

In the macOS release job, removing --no-codesign means Xcode now signs the CI artifact and applies macos/Runner/Release.entitlements; that file only enables com.apple.security.app-sandbox, while the app’s AI providers make outbound http requests (openai_compatible_provider.dart / ollama_provider.dart). Apple documents com.apple.security.network.client as the App Sandbox “Outgoing Connections (Client)” entitlement, so the downloadable macOS release will block configured AI calls unless the release entitlements are completed before signing.

Useful? React with 👍 / 👎.


- name: Package macOS release
shell: bash
Expand Down
Loading