osxbundle: avoid running codesign with deprecated --deep argument

[davidkna]

--deep is deprecated as of macos 13.0.
It is also not supported by alternative codesign implementations like
sigtool.

Related: NixOS/nixpkgs#270691

Read this before you submit this pull request:
https://github.com/mpv-player/mpv/blob/master/DOCS/contribute.md

Reading this link and following the rules will get your pull request reviewed
and merged faster. Nobody wants lazy pull requests.

[Akemi]

sry for the late reply, i wanted to get some vulkan/moltenvk bundling changes into mpv before this.

anyway with 6b5b4b7 we are now bundling vulkan loaders (driver + layers) with the App bundle. because of that we have another folder where dylibs reside Contents/Frameworks, which possibly also need signing. those dylibs are not directly linked to the mpv binary but loaded dynamically by the vulkan loader and that's the reason why i didn't put them in the lib folder next to the mpv binary.

a bit sad about the --deep parameter, but can't be helped. maybe the function could be made a bit more generic, eg a list of folders/files that need to be signed and are iterated over.

[davidkna]

@Akemi Thanks, I've updated the function to contain a list of directories with binaries to sign. I've also verified that it still works with -s if the Frameworks directory does not exist.

[github-actions]

Download the artifacts for this pull request:

Windows

• mpv-i686-w64-mingw32
• mpv-x86_64-w64-mingw32

macOS

• mpv-macos-14-arm
• mpv-macos-13-intel
• mpv-macos-12-intel

[Akemi]

thanks for your fix and contribution.