Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
83 commits
Select commit Hold shift + click to select a range
add26af
BoringTun (#597)
moubctez Oct 3, 2025
b17b419
share rust toolchain between nix shell & package (#610)
wojcik91 Oct 3, 2025
2d5ceb0
Merge main -> dev after 1.5.2 release (#609)
wojcik91 Oct 3, 2025
7eec3bf
update aur packages workflow
jakub-tldr Oct 7, 2025
5b3f4fe
typo fix
jakub-tldr Oct 7, 2025
13dda75
add strategy
jakub-tldr Oct 7, 2025
b9e9122
change version
jakub-tldr Oct 7, 2025
1fb15f9
different git checkout
jakub-tldr Oct 7, 2025
094c39d
add .ssh
jakub-tldr Oct 7, 2025
76062b5
fix .ssh
jakub-tldr Oct 7, 2025
56e4806
create non-root user to use makepkg
jakub-tldr Oct 7, 2025
494164c
added cleaning of aur-repo directory
jakub-tldr Oct 7, 2025
9ef5967
shasum typo
jakub-tldr Oct 7, 2025
dae989e
cat .srcinfo for debug
jakub-tldr Oct 7, 2025
a316c3e
test with build-linux
jakub-tldr Oct 7, 2025
d69b3a5
check before release
jakub-tldr Oct 7, 2025
3d29aa2
add on push
jakub-tldr Oct 7, 2025
de58d3e
ready to release
jakub-tldr Oct 7, 2025
ae13e5c
username change
jakub-tldr Oct 8, 2025
be48ab8
fix nix setup for boringtun repo (#613)
wojcik91 Oct 8, 2025
b3e07a2
Merge pull request #614 from DefGuard/aur_packages
teon Oct 10, 2025
425d569
Run aur workflow only on full release (#619)
jakub-tldr Oct 15, 2025
249e465
APT uploading/signing workflow (#622)
jakub-tldr Oct 20, 2025
123444b
Direct WireGuard management on Windows using wireguard-nt (#626)
j-chmielewski Oct 21, 2025
c42f074
client auto-provisioning (#627)
wojcik91 Oct 21, 2025
817a2f4
Build and sign Defguard client without wireguard binary (#629)
j-chmielewski Oct 21, 2025
7973526
List whole directory (#631)
jakub-tldr Oct 22, 2025
3572e3c
refresh tray icon after instance deletion (#639)
jakub-tldr Oct 23, 2025
344b65d
refresh modal on location change (#640)
jakub-tldr Oct 23, 2025
2a348dc
add Windows provisioning script to MSI installer (#625)
wojcik91 Oct 24, 2025
84496f2
Service locations on Windows (Pre-logon, Always-on) (#636)
t-aleksander Oct 26, 2025
2a97b3b
add missing DEB & RPM dependencies (#642)
wojcik91 Oct 27, 2025
2690e65
Fix issues related to service locations (#643)
t-aleksander Oct 27, 2025
f6bf47a
Fix issues related to service locations 2 (#644)
t-aleksander Oct 28, 2025
03ad16b
add missing query (#646)
t-aleksander Oct 28, 2025
96bc7e8
Fixes pentest issue DG25-27 from 2025-09-02 (#641)
j-chmielewski Oct 29, 2025
cb01cbc
Merge branch 'main' into merger-pre-1.6
j-chmielewski Oct 29, 2025
35d3a54
Merge pull request #649 from DefGuard/merger-pre-1.6
j-chmielewski Oct 29, 2025
efc9ac0
remove duplicate apt-sign job
j-chmielewski Oct 29, 2025
de8efb0
don't log enrollment token (#650)
j-chmielewski Oct 30, 2025
16e2f95
add helper script to generate enrollment tokens (#653)
wojcik91 Oct 31, 2025
12b23bb
Swift plugin (#630)
moubctez Nov 3, 2025
1009918
pnpm update
j-chmielewski Nov 3, 2025
a25d839
nix flake update
j-chmielewski Nov 3, 2025
444849c
Fix build on Windows (#655)
moubctez Nov 3, 2025
690a25c
Update defguard_wireguard_rs git rev
moubctez Nov 4, 2025
f5e96e2
fix(CI): build missing service binary for MSI (#656)
wojcik91 Nov 5, 2025
62e7d6c
Basic client version reporting (#658)
t-aleksander Nov 7, 2025
a7ced1d
add admin helper script for generating enrollment tokens in Entra env…
wojcik91 Nov 10, 2025
555fb72
update helper scripts (#669)
wojcik91 Nov 12, 2025
ab21b2a
Add global MTU setting (#668)
j-chmielewski Nov 13, 2025
0434c8c
fix MFA modal error handling (#670)
wojcik91 Nov 14, 2025
0114f0f
macOS: switch to objc2 (#659)
moubctez Nov 17, 2025
acdf618
Workflow: use Tauri action (#673)
moubctez Nov 17, 2025
cfe4a31
Restore setting MTU (#674)
moubctez Nov 18, 2025
a6bd79c
remove interface if configuration fails (#676)
wojcik91 Nov 19, 2025
3839e50
macOS tunnel statistics (#678)
moubctez Nov 20, 2025
82d9d16
Fix macOS build after merge (#679)
moubctez Nov 20, 2025
9987b91
Implement "force all traffic" enterprise setting (#672)
j-chmielewski Nov 20, 2025
de5beef
Cleaner error message (#680)
jakub-tldr Nov 21, 2025
5c50710
Fix resolvconf on debian 13 (#681)
t-aleksander Nov 21, 2025
d58a8fe
Sync locations and tunnel with system settings (#684)
moubctez Nov 24, 2025
71569d7
Cleanup for Windows (#685)
moubctez Nov 24, 2025
1e3b962
update aur repo to 1.5.2 (#682)
jakub-tldr Nov 26, 2025
c507c35
[MacOS] Synchronizing state with system VPN status, logging (#694)
t-aleksander Dec 2, 2025
5823399
Fix "object not found" during disconnect after system settings connec…
t-aleksander Dec 3, 2025
af1c50b
[MacOS] Trigger MFA if needed when connecting via system settings (#700)
t-aleksander Dec 4, 2025
67c5dad
macOS: populate Help menu (#704)
moubctez Dec 8, 2025
f166dba
Adjust macos workflow to the new product name
moubctez Dec 8, 2025
30bd872
macOS: add entitlement to read files (needed for WireGuard config)
moubctez Dec 9, 2025
737025c
use published wireguard-rs (#706)
j-chmielewski Dec 9, 2025
fffa222
update protos submodule
wojcik91 Dec 9, 2025
0218f9f
Merge branch 'main' into release_1.6_merger
wojcik91 Dec 9, 2025
5be5a0b
Silence error on cancelling mobile MFA (#709)
moubctez Dec 10, 2025
d5004fb
Fix DNS though VPN
moubctez Dec 10, 2025
b0cb3c7
fix nix package setup
wojcik91 Dec 10, 2025
d8b4a99
force testflight build
wojcik91 Dec 10, 2025
8f33797
Remove com.apple.security.network.server for GOOD
moubctez Dec 10, 2025
19af6ce
Clean Apple API functions (#711)
moubctez Dec 12, 2025
507a268
Use correct logging filename (#714)
moubctez Dec 12, 2025
00323ca
macOS: set MTU on config sync (#715)
moubctez Dec 12, 2025
b48c700
Bump version to 1.6.1
moubctez Dec 15, 2025
f734d2e
fix submodules handling in Nix package (#716)
wojcik91 Dec 15, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
92 changes: 92 additions & 0 deletions .github/workflows/build-macos.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,92 @@
name: Build macOS app
on:
push:
branches:
- main
- dev
- "release/**"
paths-ignore:
- "*.md"
- "LICENSE"
tags:
- v*.*.*

jobs:
build-macos:
runs-on:
- self-hosted
- macOS
env:
APPLE_SIGNING_IDENTITY: "Apple Distribution: defguard sp. z o.o. (82GZ7KN29J)"
APPLE_SIGNING_IDENTITY_INSTALLER: "3rd Party Mac Developer Installer: defguard sp. z o.o. (82GZ7KN29J)"
APPLE_PROVIDER_SHORT_NAME: "82GZ7KN29J"
APPLE_ID: "kamil@defguard.net"
APPLE_TEAM_ID: "82GZ7KN29J"
steps:
- uses: actions/checkout@v5
with:
submodules: recursive

- name: Write release version
run: |
VERSION=$(echo ${GITHUB_REF_NAME#v} | cut -d '-' -f1)
echo Version: $VERSION
echo "VERSION=$VERSION" >> ${GITHUB_ENV}

- uses: actions/setup-node@v6
with:
node-version: "24"
cache: "pnpm"

- uses: pnpm/action-setup@v4
with:
version: 10
run_install: false

- name: Get pnpm store directory
shell: bash
run: echo "STORE_PATH=$(pnpm store path --silent)" >> ${GITHUB_ENV}

- name: Install deps
run: pnpm install --frozen-lockfile

- uses: dtolnay/rust-toolchain@stable
with:
targets: aarch64-apple-darwin,x86_64-apple-darwin

- name: Unlock keychain
run: security -v unlock-keychain -p "${{ secrets.KEYCHAIN_PASSWORD }}" login.keychain

- name: Set build number
run: |
sed -i '' "s,@BUILD_NUMBER@,${{ github.run_number }}," src-tauri/tauri.conf.json
sed -i '' "s,@BUILD_NUMBER@,${{ github.run_number }}," swift/extension/VPNExtension.xcodeproj/project.pbxproj

- name: Build app
# Switch back to tauri-action when this gets merged https://github.com/tauri-apps/tauri/pull/14379
# uses: tauri-apps/tauri-action@v0 # 0.5.24 seems to be broken, TODO: update when fixed
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
# APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
# APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
run: cd src-tauri && cargo tauri build --bundles app --target universal-apple-darwin
# with:
# args: --target universal-apple-darwin

- name: Build installation package
run: |
security -v unlock-keychain -p "${{ secrets.KEYCHAIN_PASSWORD }}" login.keychain
xcrun productbuild --sign "${{ env.APPLE_SIGNING_IDENTITY_INSTALLER }}" --component "src-tauri/target/universal-apple-darwin/release/bundle/macos/Defguard.app" /Applications defguard-client.pkg
xcrun altool --upload-app --type macos --file defguard-client.pkg --apiKey ${{ secrets.APPLE_API_KEY }} --apiIssuer ${{ secrets.APPLE_API_ISSUER }}
# xcrun notarytool submit --wait --apple-id ${{ env.APPLE_ID }} --password ${{ secrets.NOTARYTOOL_APP_SPECIFIC_PASSWORD }} --team-id ${{ env.APPLE_TEAM_ID }} defguard-client.pkg
# xcrun stapler staple defguard-client.pkg

# - name: Upload installation package
# uses: actions/upload-release-asset@v1
# env:
# GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
# with:
# upload_url: ${{ needs.create-release.outputs.upload_url }}
# asset_path: defguard-client.pkg
# asset_name: defguard-client-universal-${{ env.VERSION }}.pkg
# asset_content_type: application/octet-stream
Loading