[Github CI] Attempt to fix macOS code signing

Signed-off-by: Christian Parpart <christian@parpart.family>

Author: christianparpart

.github/workflows/build.yml

@@ -385,10 +385,13 @@ jobs:
         run: |
           # create variables
           CERTIFICATE_PATH=$RUNNER_TEMP/build_certificate.p12
-          PP_PATH=$RUNNER_TEMP/build_pp.mobileprovision
+          PP_PATH=$RUNNER_TEMP/build_pp.provisionprofile
           KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
 
           # import certificate and provisioning profile from secrets
+          echo "certificate:"
+          echo "$BUILD_CERTIFICATE_BASE64"
+          echo ""
           echo -n "$BUILD_CERTIFICATE_BASE64" | base64 --decode -o $CERTIFICATE_PATH
           echo -n "$BUILD_PROVISION_PROFILE_BASE64" | base64 --decode -o $PP_PATH
 

metainfo.xml

@@ -107,6 +107,7 @@
     <release version="0.4.4" urgency="medium" type="development">
       <description>
         <ul>
+          <li>macOS package signing is now done with a valid Apple ID</li>
           <li>macOS package is now Apple Silicon native</li>
           <li>Add CoreText font fallback implementation for macOS (#1533)</li>
           <li>Add Ubuntu-24.04 in github actions (#1460)</li>

src/contour/CMakeLists.txt

@@ -445,6 +445,7 @@ elseif(APPLE)
 
     # Install application icon
     install(FILES "res/images/contour-logo.icns" DESTINATION "${INSTALL_CMAKE_DIR}" RENAME "contour.icns")
+    install(FILES "res/entitlements.plist" DESTINATION "${App_Contents}")
     install(DIRECTORY "${terminfo_basedir}" DESTINATION "${INSTALL_CMAKE_DIR}")
     install(DIRECTORY "shell-integration" DESTINATION "${INSTALL_CMAKE_DIR}")
 

src/contour/res/entitlements.plist

@@ -0,0 +1,10 @@
+<!--?xml version="1.0" encoding="UTF-8"?-->
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+    <dict>
+        <key>com.apple.application-identifier</key>
+        <string>org.contourterminal.Terminal</string>
+        <key>com.apple.developer.team-identifier</key>
+        <string>6T525MU9UR</string>
+    </dict>
+</plist>