@@ -102,12 +102,6 @@ jobs:
102102 - name : Install tree-sitter-cli
103103 run : npm install -g tree-sitter-cli
104104
105- - name : Install ODBC
106- run : brew install unixodbc
107-
108- - name : Install dylibbundler
109- run : brew install dylibbundler
110-
111105 - name : Install Rust toolchain
112106 uses : dtolnay/rust-toolchain@stable
113107 with :
@@ -148,19 +142,10 @@ jobs:
148142 - name : Build ggsql binary (x86_64)
149143 run : cargo build --release --bin ggsql --bin ggsql-jupyter
150144
151- - name : Bundle dynamic library dependencies
152- run : |
153- dylibbundler -cd -of -b -x target/release/ggsql -d ./libs/ -p "@executable_path/../lib/ggsql$VERSION/"
154- dylibbundler -cd -of -b -x target/release/ggsql-jupyter -d ./libs/ -p "@executable_path/../lib/ggsql$VERSION/"
155-
156- - name : Sign binaries and dylibs (Developer ID Application)
145+ - name : Sign binaries (Developer ID Application)
157146 env :
158147 SIGN_ID : " Developer ID Application: ${{ secrets.GWS_APPLE_SIGN_IDENTITY }}"
159148 run : |
160- # Sign bundled dylibs first (inside-out), replacing dylibbundler's ad-hoc sigs
161- find ./libs -type f \( -name "*.dylib" -o -name "*.so" \) -print0 | \
162- xargs -0 -I{} codesign --force --options runtime --timestamp --sign "$SIGN_ID" "{}"
163- # Then sign the executables with hardened runtime + entitlements
164149 codesign --force --options runtime --timestamp \
165150 --entitlements entitlements.plist \
166151 --sign "$SIGN_ID" target/release/ggsql
@@ -177,14 +162,13 @@ jobs:
177162 APPLE_API_ISSUER : ${{ secrets.GWS_APPLE_API_ISSUER }}
178163 run : |
179164 PKG_NAME="ggsql_${VERSION}_x86_64.pkg"
180- mkdir -p pkg-payload/usr/local/bin "pkg-payload/usr/local/lib/ggsql$VERSION"
165+ mkdir -p pkg-payload/usr/local/bin
181166 cp target/release/ggsql pkg-payload/usr/local/bin/
182167 cp target/release/ggsql-jupyter pkg-payload/usr/local/bin/
183- cp -R ./libs/. "pkg-payload/usr/local/lib/ggsql$VERSION/"
184168 mkdir -p pkg-scripts
185169 cat > pkg-scripts/postinstall <<EOF
186170 #!/bin/sh
187- mkdir -p /usr/local/bin /usr/local/lib/ggsql$VERSION
171+ mkdir -p /usr/local/bin
188172 EOF
189173 chmod 755 pkg-scripts/postinstall
190174 pkgbuild \
@@ -225,12 +209,6 @@ jobs:
225209 - name : Install tree-sitter-cli
226210 run : npm install -g tree-sitter-cli
227211
228- - name : Install ODBC
229- run : brew install unixodbc
230-
231- - name : Install dylibbundler
232- run : brew install dylibbundler
233-
234212 - name : Install Rust toolchain
235213 uses : dtolnay/rust-toolchain@stable
236214 with :
@@ -271,19 +249,10 @@ jobs:
271249 - name : Build ggsql binary (aarch64)
272250 run : cargo build --release --bin ggsql --bin ggsql-jupyter
273251
274- - name : Bundle dynamic library dependencies
275- run : |
276- dylibbundler -cd -of -b -x target/release/ggsql -d ./libs/ -p "@executable_path/../lib/ggsql$VERSION/"
277- dylibbundler -cd -of -b -x target/release/ggsql-jupyter -d ./libs/ -p "@executable_path/../lib/ggsql$VERSION/"
278-
279- - name : Sign binaries and dylibs (Developer ID Application)
252+ - name : Sign binaries (Developer ID Application)
280253 env :
281254 SIGN_ID : " Developer ID Application: ${{ secrets.GWS_APPLE_SIGN_IDENTITY }}"
282255 run : |
283- # Sign bundled dylibs first (inside-out), replacing dylibbundler's ad-hoc sigs
284- find ./libs -type f \( -name "*.dylib" -o -name "*.so" \) -print0 | \
285- xargs -0 -I{} codesign --force --options runtime --timestamp --sign "$SIGN_ID" "{}"
286- # Then sign the executables with hardened runtime + entitlements
287256 codesign --force --options runtime --timestamp \
288257 --entitlements entitlements.plist \
289258 --sign "$SIGN_ID" target/release/ggsql
@@ -300,14 +269,13 @@ jobs:
300269 APPLE_API_ISSUER : ${{ secrets.GWS_APPLE_API_ISSUER }}
301270 run : |
302271 PKG_NAME="ggsql_${VERSION}_aarch64.pkg"
303- mkdir -p pkg-payload/usr/local/bin "pkg-payload/usr/local/lib/ggsql$VERSION"
272+ mkdir -p pkg-payload/usr/local/bin
304273 cp target/release/ggsql pkg-payload/usr/local/bin/
305274 cp target/release/ggsql-jupyter pkg-payload/usr/local/bin/
306- cp -R ./libs/. "pkg-payload/usr/local/lib/ggsql$VERSION/"
307275 mkdir -p pkg-scripts
308276 cat > pkg-scripts/postinstall <<EOF
309277 #!/bin/sh
310- mkdir -p /usr/local/bin /usr/local/lib/ggsql$VERSION
278+ mkdir -p /usr/local/bin
311279 EOF
312280 chmod 755 pkg-scripts/postinstall
313281 pkgbuild \
@@ -361,8 +329,7 @@ jobs:
361329 libwebkit2gtk-4.1-dev \
362330 libappindicator3-dev \
363331 librsvg2-dev \
364- patchelf \
365- unixodbc-dev
332+ patchelf
366333
367334 - name : Install cargo-packager
368335 run : cargo install cargo-packager --locked
@@ -409,18 +376,14 @@ jobs:
409376 libwebkit2gtk-4.1-dev \
410377 libappindicator3-dev \
411378 librsvg2-dev \
412- patchelf \
413- unixodbc-dev
379+ patchelf
414380
415381 - name : Install cargo-packager
416382 run : cargo install cargo-packager --locked
417383
418384 - name : Build ggsql binary (aarch64)
419385 run : cargo build --release --bin ggsql --bin ggsql-jupyter
420386
421- - name : Make empty libs dir for bundling
422- run : mkdir -p libs
423-
424387 - name : Build Debian package (aarch64)
425388 run : cargo packager --release --formats deb
426389
@@ -451,9 +414,6 @@ jobs:
451414 - name : Install tree-sitter-cli
452415 run : npm install -g tree-sitter-cli
453416
454- - name : Install ODBC
455- run : sudo apt-get install -y unixodbc-dev
456-
457417 - name : Install Rust toolchain
458418 uses : dtolnay/rust-toolchain@stable
459419
0 commit comments