@@ -157,11 +157,13 @@ jobs:
157157 echo "identity=${{ secrets.APPLE_SIGNING_IDENTITY }}" >> "$GITHUB_OUTPUT"
158158 echo "cert_ok=true" >> "$GITHUB_OUTPUT"
159159
160- # IMPORTANT: Do NOT pass APPLE_CERTIFICATE to tauri-action.
161- # We handle certificate import ourselves above. Tauri's bundler
162- # treats empty strings as "certificate present" and tries to import,
163- # which fails. By omitting the var entirely, the bundler skips import
164- # and uses the identity from APPLE_SIGNING_IDENTITY (or ad-hoc).
160+ # IMPORTANT: Do NOT pass APPLE_CERTIFICATE, APPLE_ID, APPLE_PASSWORD,
161+ # or APPLE_TEAM_ID to tauri-action. Tauri's bundler uses var_os() which
162+ # treats empty strings as "present" and attempts certificate import /
163+ # notarization even when values are empty, causing build failures.
164+ # We handle cert import ourselves above and only pass APPLE_SIGNING_IDENTITY.
165+ # When a valid Apple Developer certificate is configured, add notarization
166+ # env vars back here (APPLE_ID, APPLE_PASSWORD, APPLE_TEAM_ID).
165167 - name : Build Tauri app
166168 uses : tauri-apps/tauri-action@v0
167169 env :
@@ -170,10 +172,6 @@ jobs:
170172 TAURI_SIGNING_PRIVATE_KEY_PASSWORD : ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
171173 PKG_CONFIG_PATH : /usr/lib/x86_64-linux-gnu/pkgconfig:/usr/lib/pkgconfig:/usr/share/pkgconfig
172174 APPLE_SIGNING_IDENTITY : ${{ steps.apple-cert.outputs.identity }}
173- # Notarization only when cert import succeeded
174- APPLE_ID : ${{ steps.apple-cert.outputs.cert_ok == 'true' && secrets.APPLE_ID || '' }}
175- APPLE_PASSWORD : ${{ steps.apple-cert.outputs.cert_ok == 'true' && secrets.APPLE_PASSWORD || '' }}
176- APPLE_TEAM_ID : ${{ steps.apple-cert.outputs.cert_ok == 'true' && secrets.APPLE_TEAM_ID || '' }}
177175 with :
178176 projectPath : apps/desktop
179177 # Upload to the existing draft release
@@ -324,10 +322,11 @@ jobs:
324322 # Copy reprepro config
325323 cp -r scripts/apt-repo/conf repo/
326324
327- # Add each .deb package
325+ # Add each .deb package (--section/--priority override in case
326+ # the .deb control file is missing these fields)
328327 for deb in artifacts/*.deb; do
329328 echo "Adding: $deb"
330- reprepro -b repo includedeb stable "$deb"
329+ reprepro -b repo --section utils --priority optional includedeb stable "$deb"
331330 done
332331
333332 # Export public key
0 commit comments