Merge pull request #684 from JabRef/signingWorfklow

Add workflow for maual safari tests

Author: Siedlerchr

.github/workflows/safari-signing-test.yml

@@ -0,0 +1,56 @@
+name: Safari Signing Test
+
+on:
+  workflow_dispatch:
+    inputs:
+      run_safari_signing_test:
+        description: Run the Safari signing and publish step
+        type: boolean
+        required: true
+        default: true
+
+permissions:
+  contents: read
+
+jobs:
+  safari-publish:
+    name: Safari Publish
+    runs-on: macos-26
+    if: ${{ inputs.run_safari_signing_test }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          submodules: true
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
+
+      - name: Setup Node.js
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        with:
+          node-version: 24.16.0
+          cache: "pnpm"
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Build Safari project
+        run: make safari
+
+      - name: Upload Safari to App Store Connect
+        uses: rxliuli/safari-webext-publish-action@624701331ecbeb38464a09d3cac6d246b6efb006
+        with:
+          project-path: "dist/safari"
+          bundle-identifier: "org.jabref.JabRef-Browser-Extension"
+          team-id: ${{ secrets.APPLE_TEAM_ID }}
+          app-signing-identity: ${{ secrets.SAFARI_APP_SIGNING_IDENTITY }}
+          installer-signing-identity: ${{ secrets.SAFARI_INSTALLER_SIGNING_IDENTITY }}
+        env:
+          APPLE_CERTIFICATE_BASE64: ${{ secrets.APPLE_CERTIFICATE_BASE64 }}
+          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+          APPLE_MACOS_PROVISIONING_PROFILE_BASE64: ${{ secrets.APPLE_MACOS_PROVISIONING_PROFILE_BASE64 }}
+          APPLE_MACOS_EXTENSION_PROVISIONING_PROFILE_BASE64: ${{ secrets.APPLE_MACOS_EXTENSION_PROVISIONING_PROFILE_BASE64 }}
+          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+          APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
+          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}