build: prepare unsigned macOS test prerelease and refresh safe build dependencies

2026-09-09 22:27:55 +00:00
parent 2c93670aaf
commit 233b4989a8
3 changed files with 43 additions and 12 deletions
@@ -0,0 +1,31 @@
+# macOS test build — 0.1.1-mac.1
+
+This is an unsigned, unnotarized test prerelease. It has been packaged on Linux; it has NOT been launched or playback-tested on macOS. Do not treat it as an approved customer release.
+
+## Build
+
+Based on main commit `2c93670aafd04f05e4e14b803f4bf0eeab6dd991`. Player code is unchanged. Version metadata and three vulnerable build-time transitive dependencies were updated (xmldom, fast-uri, js-yaml).
+
+```sh
+npm ci
+npm run check
+npm audit
+CSC_IDENTITY_AUTO_DISCOVERY=false npx electron-builder --mac zip --arm64 --x64 --publish never
+```
+
+Linux Electron launch smoke: `npm run smoke:headless`. This checks the shared application, not the macOS executable.
+
+ZIP packaging works on Linux with this electron-builder version. Signing/notarization and a native macOS launch test remain separate gates. No claim is made that an unsigned app will pass Gatekeeper or Apple Silicon signature enforcement.
+
+## Test on a Mac
+
+1. Apple menu > About This Mac: Apple M-series uses arm64; Intel uses x64.
+2. Download the matching ZIP from this prerelease and extract it.
+3. Move Alta Video Player.app to Applications and try opening it.
+4. If macOS blocks it, report the exact message. Do not disable Gatekeeper globally. A scoped Open Anyway option may be available under System Settings > Privacy & Security for this trusted test build; signature failures may instead require a Mac-built/ad-hoc-signed replacement.
+5. Import a known video, then a representative export ZIP (including an encrypted one if available).
+6. Check playback, seeking, speed, multiple camera synchronization and zoom.
+7. Check integrity/certificate verification with a known export.
+8. Quit and reopen. Report macOS version, processor, and any errors. Keep customer footage and export contents out of GitPeji issues.
+
+Production remains on its existing stable release. This prerelease does not deliberately change the production download button; publish validated Mac assets to the stable release only after acceptance, retaining Windows downloads.