Skip to content

Commit 22f0687

Browse files
committed
ci: install without the pnpm store cache
Restoring the store replays Electron's postinstall from cached output rather than extracting the download, and that copy flattens the symlinks inside Electron Framework.framework. codesign then reports the bundle format as ambiguous and refuses to verify the signature.
1 parent 93a52af commit 22f0687

1 file changed

Lines changed: 5 additions & 1 deletion

File tree

‎.github/workflows/release.yml‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,10 +35,14 @@ jobs:
3535
# Reads the pinned version from package.json's packageManager field.
3636
- uses: pnpm/action-setup@v4
3737

38+
# Deliberately uncached. Restoring the pnpm store replays Electron's
39+
# postinstall from cached output instead of extracting the download, and
40+
# that copy flattens the symlinks inside Electron Framework.framework.
41+
# codesign then calls the bundle ambiguous and refuses to verify it, so
42+
# the minute this saves costs the release its signature.
3843
- uses: actions/setup-node@v4
3944
with:
4045
node-version: 22
41-
cache: pnpm
4246

4347
- run: pnpm install --frozen-lockfile
4448

0 commit comments

Comments
 (0)