retry

Author: ethanndickson

.github/workflows/ci.yml

@@ -19,11 +19,6 @@ jobs:
     runs-on: ${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
     if: false
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
-        with:
-          egress-policy: audit
-
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
@@ -46,11 +41,6 @@ jobs:
     runs-on: ${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
     if: false
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
-        with:
-          egress-policy: audit
-
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
@@ -73,11 +63,6 @@ jobs:
     runs-on: ${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
     if: false
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
-        with:
-          egress-policy: audit
-
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:

.github/workflows/release.yml

@@ -10,19 +10,14 @@ on:
 
 jobs:
   build:
-    runs-on: 'macos-15'
+    runs-on: ${{ github.repository_owner == 'coder' && 'depot-macos-latest' || 'macos-latest'}}
     if: ${{ github.repository_owner == 'coder' }}
     env: 
       CERT_PATH:       /tmp/apple_cert.p12
       APP_PROF_PATH:   /tmp/app.provisionprofile
       EXT_PROF_PATH:   /tmp/ext.provisionprofile
       KEYCHAIN_PATH:   /tmp/app-signing.keychain-db
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
-        with:
-          egress-policy: audit
-      
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
@@ -58,6 +53,14 @@ jobs:
       - name: Build
         run: |
           ./scripts/build.sh
+      
+      - name: Upload Build Artifacts
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        with:
+          name: app
+          path: |
+            ./build
+          retention-days: 7
 
       - name: Clean Up
         if: always()

Coder Desktop/project.yml

@@ -151,6 +151,8 @@ targets:
         embed: true
       - target: VPNXPC
         embed: true
+      - target: VPNLib
+        embed: true
       - target: VPN
         embed: without-signing # Embed without signing.
       - package: FluidMenuBarExtra

scripts/build.sh

@@ -35,3 +35,5 @@ xcodebuild \
     -skipPackagePluginValidation \
     CODE_SIGN_STYLE=Manual \
     CODE_SIGN_IDENTITY="$CODE_SIGN_IDENTITY" | xcpretty
+
+ditto "$(find "$HOME/Library/Developer/Xcode/DerivedData" -name "Coder Desktop.app")" "./build/Coder Desktop.app"