Merge pull request #16071 from Homebrew/pkg_tweaks
workflows/build-pkg: tweak some variables.
This commit is contained in:
commit
b855a9eae8
14
.github/workflows/build-pkg.yml
vendored
14
.github/workflows/build-pkg.yml
vendored
@ -18,7 +18,8 @@ jobs:
|
|||||||
env:
|
env:
|
||||||
TEMPORARY_CERTIFICATE_FILE: 'homebrew_developer_id_installer_certificate.p12'
|
TEMPORARY_CERTIFICATE_FILE: 'homebrew_developer_id_installer_certificate.p12'
|
||||||
TEMPORARY_KEYCHAIN_FILE: 'homebrew_installer_signing.keychain-db'
|
TEMPORARY_KEYCHAIN_FILE: 'homebrew_installer_signing.keychain-db'
|
||||||
MIN_MACOS_VERSION: '11.0'
|
# Set to the latest supported version of macOS
|
||||||
|
MIN_MACOS_VERSION: '12.0'
|
||||||
PKG_APPLE_DEVELOPER_TEAM_ID: ${{ secrets.PKG_APPLE_DEVELOPER_TEAM_ID }}
|
PKG_APPLE_DEVELOPER_TEAM_ID: ${{ secrets.PKG_APPLE_DEVELOPER_TEAM_ID }}
|
||||||
HOMEBREW_NO_ANALYTICS_THIS_RUN: 1
|
HOMEBREW_NO_ANALYTICS_THIS_RUN: 1
|
||||||
HOMEBREW_NO_ANALYTICS_MESSAGE_OUTPUT: 1
|
HOMEBREW_NO_ANALYTICS_MESSAGE_OUTPUT: 1
|
||||||
@ -38,13 +39,12 @@ jobs:
|
|||||||
run: brew install pandoc
|
run: brew install pandoc
|
||||||
|
|
||||||
- name: Create and unlock temporary macOS keychain
|
- name: Create and unlock temporary macOS keychain
|
||||||
env:
|
|
||||||
PKG_KEYCHAIN_PASSWORD: ${{ secrets.PKG_KEYCHAIN_PASSWORD }}
|
|
||||||
run: |
|
run: |
|
||||||
|
TEMPORARY_KEYCHAIN_PASSWORD="$(openssl rand -base64 20)"
|
||||||
TEMPORARY_KEYCHAIN_PATH="${RUNNER_TEMP}/${TEMPORARY_KEYCHAIN_FILE}"
|
TEMPORARY_KEYCHAIN_PATH="${RUNNER_TEMP}/${TEMPORARY_KEYCHAIN_FILE}"
|
||||||
security create-keychain -p "${PKG_KEYCHAIN_PASSWORD}" "${TEMPORARY_KEYCHAIN_PATH}"
|
security create-keychain -p "${TEMPORARY_KEYCHAIN_PASSWORD}" "${TEMPORARY_KEYCHAIN_PATH}"
|
||||||
security set-keychain-settings -l -u -t 21600 "${TEMPORARY_KEYCHAIN_PATH}"
|
security set-keychain-settings -l -u -t 21600 "${TEMPORARY_KEYCHAIN_PATH}"
|
||||||
security unlock-keychain -p "${PKG_KEYCHAIN_PASSWORD}" "${TEMPORARY_KEYCHAIN_PATH}"
|
security unlock-keychain -p "${TEMPORARY_KEYCHAIN_PASSWORD}" "${TEMPORARY_KEYCHAIN_PATH}"
|
||||||
|
|
||||||
- name: Create temporary certificate file
|
- name: Create temporary certificate file
|
||||||
env:
|
env:
|
||||||
@ -140,11 +140,11 @@ jobs:
|
|||||||
|
|
||||||
- name: Notarize Homebrew installer package
|
- name: Notarize Homebrew installer package
|
||||||
env:
|
env:
|
||||||
PKG_APPLE_ID_USERNAME: ${{ secrets.PKG_APPLE_ID_USERNAME }}
|
PKG_APPLE_ID_EMAIL: ${{ secrets.PKG_APPLE_ID_EMAIL }}
|
||||||
PKG_APPLE_ID_APP_SPECIFIC_PASSWORD: ${{ secrets.PKG_APPLE_ID_APP_SPECIFIC_PASSWORD }}
|
PKG_APPLE_ID_APP_SPECIFIC_PASSWORD: ${{ secrets.PKG_APPLE_ID_APP_SPECIFIC_PASSWORD }}
|
||||||
run: xcrun notarytool submit Homebrew-${{ steps.print-version.outputs.version }}.pkg
|
run: xcrun notarytool submit Homebrew-${{ steps.print-version.outputs.version }}.pkg
|
||||||
--team-id "${PKG_APPLE_DEVELOPER_TEAM_ID}"
|
--team-id "${PKG_APPLE_DEVELOPER_TEAM_ID}"
|
||||||
--apple-id "${PKG_APPLE_ID_USERNAME}"
|
--apple-id "${PKG_APPLE_ID_EMAIL}"
|
||||||
--password "${PKG_APPLE_ID_APP_SPECIFIC_PASSWORD}"
|
--password "${PKG_APPLE_ID_APP_SPECIFIC_PASSWORD}"
|
||||||
--wait
|
--wait
|
||||||
|
|
||||||
|
|||||||
@ -502,14 +502,16 @@ case "$*" in
|
|||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
|
|
||||||
# TODO: bump version when new macOS is released or announced
|
# TODO: bump version when new macOS is released or announced and update references in:
|
||||||
# and also update references in docs/Installation.md,
|
# - docs/Installation.md
|
||||||
# https://github.com/Homebrew/install/blob/HEAD/install.sh and
|
# - https://github.com/Homebrew/install/blob/HEAD/install.sh
|
||||||
# MacOSVersion::SYMBOLS
|
# and, if needed:
|
||||||
|
# - MacOSVersion::SYMBOLS
|
||||||
HOMEBREW_MACOS_NEWEST_UNSUPPORTED="15"
|
HOMEBREW_MACOS_NEWEST_UNSUPPORTED="15"
|
||||||
# TODO: bump version when new macOS is released and also update
|
# TODO: bump version when new macOS is released and update references in:
|
||||||
# references in docs/Installation.md and
|
# - docs/Installation.md
|
||||||
# https://github.com/Homebrew/install/blob/HEAD/install.sh
|
# - MIN_MACOS_VERSION in .github/workflows/build-pkg.yml
|
||||||
|
# - https://github.com/Homebrew/install/blob/HEAD/install.sh
|
||||||
HOMEBREW_MACOS_OLDEST_SUPPORTED="12"
|
HOMEBREW_MACOS_OLDEST_SUPPORTED="12"
|
||||||
HOMEBREW_MACOS_OLDEST_ALLOWED="10.11"
|
HOMEBREW_MACOS_OLDEST_ALLOWED="10.11"
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user