fix(release): forward package field allowlist

Author: steipete

scripts/run-official-goreleaser.py

@@ -94,6 +94,7 @@ def run_helper(arguments: list[str]) -> None:
         "LC_ALL": "C",
         "LOGNAME": account.pw_name,
         "MAC_RELEASE_MANIFEST": manifest,
+        "MAC_RELEASE_OP_FIELDS": " ".join(sorted(PACKAGE_FIELDS)),
         "PATH": SYSTEM_PATH,
         "SHELL": "/bin/bash",
         "TERM": "xterm-256color",

scripts/test-release-local.sh

@@ -837,6 +837,7 @@ if declare -F security >/dev/null || [[ -n "${ATTACKER_SECRET+x}" || -n "${PYTHO
 fi
 [[ "$PATH" == /opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin ]]
 [[ "$HOME" == /* && "$TMPDIR" == /tmp && "$LC_ALL" == C && "$TZ" == UTC ]]
+[[ "${MAC_RELEASE_OP_FIELDS:-}" == NOTARYTOOL_KEYCHAIN_PROFILE ]]
 if [[ "$1" == draft ]]; then
   [[ "${GITHUB_TOKEN:-}" == test-token ]]
 else