From ea2fdd5d885e8c53c2460de15c03587f43f44c70 Mon Sep 17 00:00:00 2001 From: Vishal Rana Date: Sat, 31 Oct 2026 10:35:48 -0700 Subject: [PATCH] fix(release): retry the published app's stapler validation The release workflow's last step validates the published app's notarization ticket, which fetches it from Apple. The runner's connection dropped there in both v2026.10.26-alpha and v2026.10.27-alpha ("The network connection was lost", error 68), failing a release that was already published and valid. Validation now retries up to five times, 30 seconds apart, as the build already does when stapling. --- scripts/verify-release-dist.sh | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/scripts/verify-release-dist.sh b/scripts/verify-release-dist.sh index 6d7528a..62dc3ef 100755 --- a/scripts/verify-release-dist.sh +++ b/scripts/verify-release-dist.sh @@ -75,7 +75,13 @@ for arch in amd64 arm64; do # Verify the nested service before the outer resource seal. codesign --verify --strict --verbose=2 "$app_temp/Driga.app/Contents/Helpers/Driga Service.app" codesign --verify --deep --strict --verbose=2 "$app_temp/Driga.app" - xcrun stapler validate "$app_temp/Driga.app" + # Validation fetches the ticket from Apple, which a runner's network can + # drop briefly, as build-macos-app.sh allows for when stapling. + for attempt in 1 2 3 4 5; do + xcrun stapler validate "$app_temp/Driga.app" && break + [ "$attempt" = 5 ] && exit 1 + sleep 30 + done spctl --assess --type execute --verbose=2 "$app_temp/Driga.app" rm -rf "$app_temp" trap - EXIT