From e62e921eec76d7a3a148bc3a0f2b48fb3101de4e Mon Sep 17 00:00:00 2001
From: Fedor Korotkov <fedor.korotkov@gmail.com>
Date: Mon, 3 Apr 2023 10:09:10 -0400
Subject: [PATCH] Build pkg again (#457)

* Build .pkg again

Last time it broke in #441. The theory is that notarization of the `.pkg` before after notarizaation of the binary was breaking validation on Apple side.

This attempt does build the .pkg before we do all the dance with gon ang goreleaser.

* codesign deep

* Move back to before hooks
---
 .ci/create-pkg.sh | 4 ++++
 .goreleaser.yml   | 3 +++
 2 files changed, 7 insertions(+)

diff --git a/.ci/create-pkg.sh b/.ci/create-pkg.sh
index f4448f5..8e5c023 100755
--- a/.ci/create-pkg.sh
+++ b/.ci/create-pkg.sh
@@ -6,6 +6,10 @@ export VERSION="${CIRRUS_TAG:-0}"
 
 mkdir -p .ci/pkg/
 cp .build/arm64-apple-macosx/release/tart .ci/pkg/tart
+codesign --sign "Developer ID Application: Cirrus Labs, Inc. (9M2P8L4D89)" \
+  --options=runtime --deep \
+  --entitlements Resources/tart-prod.entitlements --force \
+  .ci/pkg/tart
 cp Resources/embedded.provisionprofile .ci/pkg/embedded.provisionprofile
 pkgbuild --root .ci/pkg/ --identifier com.github.cirruslabs.tart --version $VERSION \
   --scripts .ci/pkg/scripts \
diff --git a/.goreleaser.yml b/.goreleaser.yml
index 730770c..9119fb7 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -4,6 +4,7 @@ before:
   hooks:
     - .ci/set-version.sh
     - swift build -c release --product tart
+    - ./.ci/create-pkg.sh
 
 builds:
   - builder: prebuilt
@@ -29,6 +30,8 @@ archives:
 
 release:
   prerelease: auto
+  extra_files:
+    - glob: ./.ci/Tart-{{ .Tag }}.pkg
 
 brews:
   - name: tart