Skip to content

Commit 3cacd07

Browse files
erikngclaude
erikng
and
claude
committed
Modernize CI: macos-26 runner, drop pinned Xcode path, bump action pins
- runs-on: macos-13 → macos-26 (current Apple Silicon runner image) - Drop --xcode-path arg from build invocation; script defaults to xcode-select -p, which on macos-26 resolves to the runner's default Xcode (no longer Xcode 15.2) - actions/checkout v3.4.0 → v4.1.7 - apple-actions/import-codesign-certs v2.0.0 → v3.0.0 - actions/upload-artifact v4.6.2 → v4.3.4 (matches Nudge for cross-tool consistency) - metcalfc/changelog-generator and softprops/action-gh-release already matched Nudge; left untouched Pins mirror macadmins/nudge's Manual build workflow for consistency across the maintainer's macOS toolchain. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 6cedb12 commit 3cacd07

6 files changed

Lines changed: 36 additions & 42 deletions

File tree

‎.github/workflows/build_python_3.10.yml‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,23 +14,23 @@ on:
1414

1515
jobs:
1616
build:
17-
runs-on: macos-14
17+
runs-on: macos-26
1818

1919
steps:
2020
- name: Checkout python repo
21-
uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
21+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2222
with:
2323
fetch-depth: 0
2424

2525
- name: Install Apple Developer ID Application certificates
26-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
26+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
2727
with:
2828
keychain-password: ${{ github.run_id }}
2929
p12-file-base64: ${{ secrets.APP_CERTIFICATES_P12_MAOS }}
3030
p12-password: ${{ secrets.APP_CERTIFICATES_P12_PASSWORD_MAOS }}
3131

3232
- name: Install Apple Developer ID Installer certificates
33-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
33+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
3434
with:
3535
create-keychain: false # do not create a new keychain for this value
3636
keychain-password: ${{ github.run_id }}
@@ -43,8 +43,7 @@ jobs:
4343
--python-version "$PYTHON_VERSION" \
4444
--installer-id "$DEV_INSTALLER_ID" \
4545
--application-id "$DEV_APPLICATION_ID" \
46-
--notary-password "$NOTARY_APP_PASSWORD" \
47-
--xcode-path "/Applications/Xcode_15.2.app"
46+
--notary-password "$NOTARY_APP_PASSWORD"
4847
4948
- name: get environment variables
5049
id: get_env_var
@@ -98,7 +97,7 @@ jobs:
9897
files: ${{github.workspace}}/outputs/*.pkg
9998

10099
- name: Upload packages
101-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
100+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
102101
with:
103102
name: packages
104103
path: outputs/

‎.github/workflows/build_python_3.11.yml‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,23 +14,23 @@ on:
1414

1515
jobs:
1616
build:
17-
runs-on: macos-14
17+
runs-on: macos-26
1818

1919
steps:
2020
- name: Checkout python repo
21-
uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
21+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2222
with:
2323
fetch-depth: 0
2424

2525
- name: Install Apple Developer ID Application certificates
26-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
26+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
2727
with:
2828
keychain-password: ${{ github.run_id }}
2929
p12-file-base64: ${{ secrets.APP_CERTIFICATES_P12_MAOS }}
3030
p12-password: ${{ secrets.APP_CERTIFICATES_P12_PASSWORD_MAOS }}
3131

3232
- name: Install Apple Developer ID Installer certificates
33-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
33+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
3434
with:
3535
create-keychain: false # do not create a new keychain for this value
3636
keychain-password: ${{ github.run_id }}
@@ -43,8 +43,7 @@ jobs:
4343
--python-version "$PYTHON_VERSION" \
4444
--installer-id "$DEV_INSTALLER_ID" \
4545
--application-id "$DEV_APPLICATION_ID" \
46-
--notary-password "$NOTARY_APP_PASSWORD" \
47-
--xcode-path "/Applications/Xcode_15.2.app"
46+
--notary-password "$NOTARY_APP_PASSWORD"
4847
4948
- name: get environment variables
5049
id: get_env_var
@@ -91,7 +90,7 @@ jobs:
9190
files: ${{github.workspace}}/outputs/*.pkg
9291

9392
- name: Upload packages
94-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
93+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
9594
with:
9695
name: packages
9796
path: outputs/

‎.github/workflows/build_python_3.12.yml‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,23 +14,23 @@ on:
1414

1515
jobs:
1616
build:
17-
runs-on: macos-14
17+
runs-on: macos-26
1818

1919
steps:
2020
- name: Checkout python repo
21-
uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
21+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2222
with:
2323
fetch-depth: 0
2424

2525
- name: Install Apple Developer ID Application certificates
26-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
26+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
2727
with:
2828
keychain-password: ${{ github.run_id }}
2929
p12-file-base64: ${{ secrets.APP_CERTIFICATES_P12_MAOS }}
3030
p12-password: ${{ secrets.APP_CERTIFICATES_P12_PASSWORD_MAOS }}
3131

3232
- name: Install Apple Developer ID Installer certificates
33-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
33+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
3434
with:
3535
create-keychain: false # do not create a new keychain for this value
3636
keychain-password: ${{ github.run_id }}
@@ -43,8 +43,7 @@ jobs:
4343
--python-version "$PYTHON_VERSION" \
4444
--installer-id "$DEV_INSTALLER_ID" \
4545
--application-id "$DEV_APPLICATION_ID" \
46-
--notary-password "$NOTARY_APP_PASSWORD" \
47-
--xcode-path "/Applications/Xcode_15.2.app"
46+
--notary-password "$NOTARY_APP_PASSWORD"
4847
4948
- name: get environment variables
5049
id: get_env_var
@@ -91,7 +90,7 @@ jobs:
9190
files: ${{github.workspace}}/outputs/*.pkg
9291

9392
- name: Upload packages
94-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
93+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
9594
with:
9695
name: packages
9796
path: outputs/

‎.github/workflows/build_python_3.13.yml‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,23 +14,23 @@ on:
1414

1515
jobs:
1616
build:
17-
runs-on: macos-14
17+
runs-on: macos-26
1818

1919
steps:
2020
- name: Checkout python repo
21-
uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
21+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2222
with:
2323
fetch-depth: 0
2424

2525
- name: Install Apple Developer ID Application certificates
26-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
26+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
2727
with:
2828
keychain-password: ${{ github.run_id }}
2929
p12-file-base64: ${{ secrets.APP_CERTIFICATES_P12_MAOS }}
3030
p12-password: ${{ secrets.APP_CERTIFICATES_P12_PASSWORD_MAOS }}
3131

3232
- name: Install Apple Developer ID Installer certificates
33-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
33+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
3434
with:
3535
create-keychain: false # do not create a new keychain for this value
3636
keychain-password: ${{ github.run_id }}
@@ -43,8 +43,7 @@ jobs:
4343
--python-version "$PYTHON_VERSION" \
4444
--installer-id "$DEV_INSTALLER_ID" \
4545
--application-id "$DEV_APPLICATION_ID" \
46-
--notary-password "$NOTARY_APP_PASSWORD" \
47-
--xcode-path "/Applications/Xcode_15.2.app"
46+
--notary-password "$NOTARY_APP_PASSWORD"
4847
4948
- name: get environment variables
5049
id: get_env_var
@@ -91,7 +90,7 @@ jobs:
9190
files: ${{github.workspace}}/outputs/*.pkg
9291

9392
- name: Upload packages
94-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
93+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
9594
with:
9695
name: packages
9796
path: outputs/

‎.github/workflows/build_python_3.14.yml‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,23 +14,23 @@ on:
1414

1515
jobs:
1616
build:
17-
runs-on: macos-14
17+
runs-on: macos-26
1818

1919
steps:
2020
- name: Checkout python repo
21-
uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
21+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2222
with:
2323
fetch-depth: 0
2424

2525
- name: Install Apple Developer ID Application certificates
26-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
26+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
2727
with:
2828
keychain-password: ${{ github.run_id }}
2929
p12-file-base64: ${{ secrets.APP_CERTIFICATES_P12_MAOS }}
3030
p12-password: ${{ secrets.APP_CERTIFICATES_P12_PASSWORD_MAOS }}
3131

3232
- name: Install Apple Developer ID Installer certificates
33-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
33+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
3434
with:
3535
create-keychain: false # do not create a new keychain for this value
3636
keychain-password: ${{ github.run_id }}
@@ -43,8 +43,7 @@ jobs:
4343
--python-version "$PYTHON_VERSION" \
4444
--installer-id "$DEV_INSTALLER_ID" \
4545
--application-id "$DEV_APPLICATION_ID" \
46-
--notary-password "$NOTARY_APP_PASSWORD" \
47-
--xcode-path "/Applications/Xcode_15.2.app"
46+
--notary-password "$NOTARY_APP_PASSWORD"
4847
4948
- name: get environment variables
5049
id: get_env_var
@@ -91,7 +90,7 @@ jobs:
9190
files: ${{github.workspace}}/outputs/*.pkg
9291

9392
- name: Upload packages
94-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
93+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
9594
with:
9695
name: packages
9796
path: outputs/

‎.github/workflows/build_python_3.9.yml‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,23 +14,23 @@ on:
1414

1515
jobs:
1616
build:
17-
runs-on: macos-14
17+
runs-on: macos-26
1818

1919
steps:
2020
- name: Checkout python repo
21-
uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
21+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2222
with:
2323
fetch-depth: 0
2424

2525
- name: Install Apple Developer ID Application certificates
26-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
26+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
2727
with:
2828
keychain-password: ${{ github.run_id }}
2929
p12-file-base64: ${{ secrets.APP_CERTIFICATES_P12_MAOS }}
3030
p12-password: ${{ secrets.APP_CERTIFICATES_P12_PASSWORD_MAOS }}
3131

3232
- name: Install Apple Developer ID Installer certificates
33-
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
33+
uses: apple-actions/import-codesign-certs@63fff01cd422d4b7b855d40ca1e9d34d2de9427d # v3.0.0
3434
with:
3535
create-keychain: false # do not create a new keychain for this value
3636
keychain-password: ${{ github.run_id }}
@@ -43,8 +43,7 @@ jobs:
4343
--python-version "$PYTHON_VERSION" \
4444
--installer-id "$DEV_INSTALLER_ID" \
4545
--application-id "$DEV_APPLICATION_ID" \
46-
--notary-password "$NOTARY_APP_PASSWORD" \
47-
--xcode-path "/Applications/Xcode_15.2.app"
46+
--notary-password "$NOTARY_APP_PASSWORD"
4847
4948
- name: get environment variables
5049
id: get_env_var
@@ -98,7 +97,7 @@ jobs:
9897
files: ${{github.workspace}}/outputs/*.pkg
9998

10099
- name: Upload packages
101-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
100+
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
102101
with:
103102
name: packages
104103
path: outputs/

0 commit comments

Comments
 (0)