[desktop] Prepare for release (#1596)

- **Run the electron builder in the correct path**
- **Provide repository**
- **Move to new notarization mechanism**
- **Use an Electron Builder version that supports notarytool**

desktop/.github/workflows/desktop-release.yml

@@ -32,9 +32,7 @@ jobs:
 
         strategy:
             matrix:
-                os: [macos-latest]
-                # Commented for testing
-                # os: [macos-latest, ubuntu-latest, windows-latest]
+                os: [macos-latest, ubuntu-latest, windows-latest]
 
         steps:
             - name: Checkout code
@@ -55,13 +53,6 @@ jobs:
             - name: Install dependencies
               run: yarn install
 
-            - name: Prepare for app notarization
-              if: startsWith(matrix.os, 'macos')
-              # Import Apple API key for app notarization on macOS
-              run: |
-                  mkdir -p ~/private_keys/
-                  echo '${{ secrets.API_KEY }}' > ~/private_keys/AuthKey_${{ secrets.API_KEY_ID }}.p8
-
             - name: Install libarchive-tools for pacman build
               if: startsWith(matrix.os, 'ubuntu')
               # See:
@@ -84,7 +75,9 @@ jobs:
                   mac_certs: ${{ secrets.MAC_CERTS }}
                   mac_certs_password: ${{ secrets.MAC_CERTS_PASSWORD }}
               env:
-                  # macOS notarization API key details
-                  API_KEY_ID: ${{ secrets.API_KEY_ID }}
-                  API_KEY_ISSUER_ID: ${{ secrets.API_KEY_ISSUER_ID }}
+                  # macOS notarization credentials key details
+                  APPLE_ID: ${{ secrets.APPLE_ID }}
+                  APPLE_APP_SPECIFIC_PASSWORD:
+                      ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
+                  APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
                   USE_HARD_LINKS: false

desktop/docs/release.md

@@ -23,10 +23,10 @@ The workflow is:
 
     -   Update the CHANGELOG.
     -   Update the version in `package.json`
-    -   `git commit -m 'Release v1.x.x'`
+    -   `git commit -m "[photosd] Release v1.2.3"`
     -   Open PR, merge into main.
 
-2.  Tag this commit with a tag matching the pattern `photosd-v1.2.3`, where
+2.  Tag the merge commit with a tag matching the pattern `photosd-v1.2.3`, where
     `1.2.3` is the version in `package.json`
 
     ```sh

desktop/electron-builder.yml

@@ -29,4 +29,5 @@ mac:
         arch: [universal]
     category: public.app-category.photography
     hardenedRuntime: true
+    notarize: true
 afterSign: electron-builder-notarize

desktop/package.json

@@ -3,6 +3,7 @@
     "version": "1.7.0-beta.0",
     "private": true,
     "description": "Desktop client for Ente Photos",
+    "repository": "github:ente-io/photos-desktop",
     "author": "Ente <code@ente.io>",
     "main": "app/main.js",
     "scripts": {
@@ -44,7 +45,7 @@
         "@typescript-eslint/parser": "^7",
         "concurrently": "^8",
         "electron": "^30",
-        "electron-builder": "^24",
+        "electron-builder": "25.0.0-alpha.6",
         "electron-builder-notarize": "^1.5",
         "eslint": "^8",
         "prettier": "^3",