ci(desktop): build macOS and Windows bundles too

Add macOS (arm64 + Intel) and Windows to the release matrix, so a tag builds
deb/AppImage, dmg, and an NSIS installer in one go. Run the vendor + build steps
under bash for a uniform invocation across runners, and make vendor-node.sh's
Windows zip extraction fall back across unzip/7z/tar. macOS and Windows bundles
are unsigned for now (Gatekeeper/SmartScreen will warn) — signing is a later add.

Author: ApocDev

.github/workflows/release.yml

@@ -17,16 +17,14 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - platform: ubuntu-22.04
+          - platform: ubuntu-22.04    # Linux x64 (deb + AppImage)
             bundles: 'deb,appimage'
-          # Expand over time — vendor-node.sh auto-detects the runner's triple, so
-          # adding a platform is mostly just another matrix entry:
-          #   - platform: macos-14         # Apple Silicon
-          #     bundles: 'dmg'
-          #   - platform: macos-13         # Intel
-          #     bundles: 'dmg'
-          #   - platform: windows-latest   # (use node_modules/.bin/tauri.cmd to build)
-          #     bundles: 'nsis'
+          - platform: macos-14        # macOS Apple Silicon
+            bundles: 'dmg'
+          - platform: macos-13        # macOS Intel
+            bundles: 'dmg'
+          - platform: windows-latest  # Windows x64
+            bundles: 'nsis'
     runs-on: ${{ matrix.platform }}
     steps:
       - uses: actions/checkout@v4
@@ -60,13 +58,15 @@ jobs:
       # in the checkout). vendor-node.sh resolves the host triple itself.
       - name: Vendor the node sidecar
         working-directory: app/src-tauri
+        shell: bash
         run: ./vendor-node.sh
 
       # Build the bundle. The tauri CLI (from @tauri-apps/cli, installed by vp) runs
       # `vp build` (beforeBuildCommand) then bundles. `--bundles` overrides the
       # deb-only default in tauri.conf.json for this platform.
       - name: Build the desktop bundle
         working-directory: app
+        shell: bash
         run: ./node_modules/.bin/tauri build --bundles ${{ matrix.bundles }}
 
       # Attach the bundles to a draft Release for the pushed tag.
@@ -76,9 +76,8 @@ jobs:
         with:
           draft: true
           files: |
-            app/src-tauri/target/release/bundle/**/*.deb
-            app/src-tauri/target/release/bundle/**/*.AppImage
-            app/src-tauri/target/release/bundle/**/*.dmg
-            app/src-tauri/target/release/bundle/**/*.msi
-            app/src-tauri/target/**/release/bundle/**/*.deb
-            app/src-tauri/target/**/release/bundle/**/*.AppImage
+            app/src-tauri/target/**/bundle/**/*.deb
+            app/src-tauri/target/**/bundle/**/*.AppImage
+            app/src-tauri/target/**/bundle/**/*.dmg
+            app/src-tauri/target/**/bundle/**/*.msi
+            app/src-tauri/target/**/bundle/**/*.exe

app/src-tauri/vendor-node.sh

@@ -27,7 +27,10 @@ trap 'rm -rf "$TMP"' EXIT
 
 if [[ "$NODE_ARCH" == win-* ]]; then
   curl -fsSL "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-$NODE_ARCH.zip" -o "$TMP/node.zip"
-  unzip -q "$TMP/node.zip" -d "$TMP"
+  # extract with whatever's available (Git Bash often lacks unzip; 7z/bsdtar do zip)
+  if command -v unzip >/dev/null 2>&1; then unzip -q "$TMP/node.zip" -d "$TMP"
+  elif command -v 7z >/dev/null 2>&1; then 7z x -o"$TMP" "$TMP/node.zip" >/dev/null
+  else tar -xf "$TMP/node.zip" -C "$TMP"; fi
   cp "$TMP/node-v$NODE_VERSION-$NODE_ARCH/node.exe" "$DIR/binaries/node-$TRIPLE.exe"
 else
   curl -fsSL "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-$NODE_ARCH.tar.xz" -o "$TMP/node.tar.xz"