refactor: update release.yml to replace .pkg installer with .dmg installer and add ad-hoc signing step

Author: JasonLovesDoggo

.github/workflows/release.yml

@@ -139,49 +139,45 @@ jobs:
           ls -lah "${APP_BUNDLE}/Contents/MacOS/"
           ls -lah "${APP_BUNDLE}/Contents/Resources/" || true
 
-      - name: Build .pkg installer
+      - name: Ad-hoc sign app bundle
+        run: |
+          APP_NAME="Flow"
+          codesign --force --deep --sign - "${APP_NAME}.app"
+          xattr -rc "${APP_NAME}.app"
+          codesign -dv --verbose=4 "${APP_NAME}.app" || true
+
+      - name: Build .dmg installer
         env:
           VERSION: ${{ steps.version.outputs.version }}
         run: |
           APP_NAME="Flow"
-          PKG_NAME="Flow-${VERSION}-macOS-universal.pkg"
-          BUNDLE_ID="com.flowwispr.flow"
-
-          # Build component package
-          pkgbuild \
-            --identifier "${BUNDLE_ID}" \
-            --version "${VERSION}" \
-            --install-location "/Applications" \
-            --component "./${APP_NAME}.app" \
-            "Flow-component.pkg"
-
-          # Create distribution package
-          productbuild \
-            --package "Flow-component.pkg" \
-            --identifier "${BUNDLE_ID}" \
-            "${PKG_NAME}"
+          DMG_NAME="Flow-${VERSION}-macOS-universal.dmg"
 
-          # Clean up component package
-          rm "Flow-component.pkg"
+          hdiutil create \
+            -volname "${APP_NAME}" \
+            -srcfolder "${APP_NAME}.app" \
+            -ov \
+            -format UDZO \
+            "${DMG_NAME}"
 
-          echo "Package created:"
-          ls -lh "${PKG_NAME}"
+          echo "DMG created:"
+          ls -lh "${DMG_NAME}"
 
-          # Store package name for later steps
-          echo "pkg_name=${PKG_NAME}" >> $GITHUB_ENV
+          # Store dmg name for later steps
+          echo "dmg_name=${DMG_NAME}" >> $GITHUB_ENV
 
       - name: Generate checksum
         run: |
-          shasum -a 256 "${{ env.pkg_name }}" > "${{ env.pkg_name }}.sha256"
-          cat "${{ env.pkg_name }}.sha256"
+          shasum -a 256 "${{ env.dmg_name }}" > "${{ env.dmg_name }}.sha256"
+          cat "${{ env.dmg_name }}.sha256"
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v1
         if: startsWith(github.ref, 'refs/tags/')
         with:
           files: |
-            ${{ env.pkg_name }}
-            ${{ env.pkg_name }}.sha256
+            ${{ env.dmg_name }}
+            ${{ env.dmg_name }}.sha256
           draft: false
           generate_release_notes: true
           fail_on_unmatched_files: true
@@ -194,6 +190,6 @@ jobs:
         with:
           name: flow-macos-universal
           path: |
-            ${{ env.pkg_name }}
-            ${{ env.pkg_name }}.sha256
+            ${{ env.dmg_name }}
+            ${{ env.dmg_name }}.sha256
           retention-days: 7