Skip to content

Conversation

@alexhancock
Copy link
Collaborator

@alexhancock alexhancock commented Aug 8, 2025

This will give us unsigned pre-release builds for now (given current signing doesn't work https://github.com/block/goose/actions/runs/16833234629/job/47686043767?pr=3921) that can be run if the appropriate steps are taken for testing.

We will come up with a better signing system soon to enable:

  1. Official releases
  2. Pre-releases from release branches
  3. Nightly builds from main

to all be signed

@alexhancock alexhancock requested a review from jamadeo August 8, 2025 15:44
id-token: write
contents: read
with:
signing: true
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

small nit but the PR comment below does say "this app is signed" which won't be true of course. We could stick the xattr command instruction there

@alexhancock alexhancock force-pushed the alexhancock/disable-release-branch-bundle-signing branch from c4b8740 to 409826e Compare August 8, 2025 15:53
@alexhancock alexhancock changed the title fix: disable signing for release branches as it doesn't work at present anyway fix: disable signing for release branches until we figure out keys for this flow Aug 8, 2025
@alexhancock alexhancock merged commit 506392e into main Aug 8, 2025
11 checks passed
@alexhancock alexhancock deleted the alexhancock/disable-release-branch-bundle-signing branch August 8, 2025 16:26
katzdave added a commit that referenced this pull request Aug 8, 2025
* 'main' of github.com:block/goose:
  remove fallback routing to hub/home for unknown routes (#3954)
  Use cross in linux bundle workflow (#3950)
  fix: disable signing for release branches until we figure out keys for this flow (#3951)
  Sanitize Tags Unicode Block (#3920)
  Add a message about DCO to CONTRIBUTING.md (#3741)
  Move hardcoded LLM prompts to template files (#3934)
  docs: migrate streamable config to consolidated component (#3936)
  feat: streamline list args on cli (#3937)
  mcp/developer: Refactor to use tokio SplitStream (#3894)
  feat: first time automated ollama install experience and openrouter (#3881)
  chore: rmcp 0.5.0 (#3935)
  add gpt-5 to openai provider format (#3924)
  added gpt5 context limit (#3927)
  show status of osx codesigning and increase timeout (#3926)
  Bump auto-compact threshold to 80% (#3925)
  FIX: gemini tool call hanging (#3898)
  feat(deps): upgrade rmcp to 0.4.1 (#3918)
  Fix dark mode rendering of config form and centered providers grid for wider screens. (#3837)
  fix: extension list not refreshing after installing from deeplink (#3878)
katzdave added a commit that referenced this pull request Aug 8, 2025
* 'main' of github.com:block/goose:
  remove fallback routing to hub/home for unknown routes (#3954)
  Use cross in linux bundle workflow (#3950)
  fix: disable signing for release branches until we figure out keys for this flow (#3951)
  Sanitize Tags Unicode Block (#3920)
  Add a message about DCO to CONTRIBUTING.md (#3741)
  Move hardcoded LLM prompts to template files (#3934)
  docs: migrate streamable config to consolidated component (#3936)
  feat: streamline list args on cli (#3937)
  mcp/developer: Refactor to use tokio SplitStream (#3894)
  feat: first time automated ollama install experience and openrouter (#3881)
  chore: rmcp 0.5.0 (#3935)
  add gpt-5 to openai provider format (#3924)
  added gpt5 context limit (#3927)
  show status of osx codesigning and increase timeout (#3926)
  Bump auto-compact threshold to 80% (#3925)
ayax79 pushed a commit to ayax79/goose that referenced this pull request Aug 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants