Use notarytool

.github/workflows/release.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.17
+          go-version: 1.21
 
       - name: "Build"
         run: |
@@ -78,6 +78,7 @@ jobs:
       - name: Notarize
         env: 
           PRIMARY_BUNDLE_ID: com.mysterium.launcher
+          APPLE_TEAM_ID: ${{ secrets.NOTARIZE_TEAM_ID }}
           APPLE_ID: ${{ secrets.NOTARIZE_EMAIL }}
           TARGET_BINARY: ./mysterium_launcher_macos.dmg
           APP_SPECIFIC_PASSWORD: ${{ secrets.NOTARIZE_APP_SPEC_PWD }}

notarize.sh

@@ -1,24 +1,19 @@
 #!/bin/sh
 
-# Submit the dmg and get REQUEST_UUID
-SUBMISSION_INFO=$(xcrun altool --notarize-app --primary-bundle-id=${PRIMARY_BUNDLE_ID} -u ${APPLE_ID} -p ${APP_SPECIFIC_PASSWORD} --file ${TARGET_BINARY} 2>&1) ;
+echo "Notarytool submit"
 
-if [ $? != 0 ]; then
-    printf "Submission failed: $SUBMISSION_INFO \n"
-    exit 5
-fi
+xcrun notarytool submit \
+  --team-id "${APPLE_TEAM_ID}" \
+  --apple-id ${APPLE_ID} \
+  --password ${APP_SPECIFIC_PASSWORD} \
+  --wait \
+  ${TARGET_BINARY}
 
-REQUEST_UUID=$(echo ${SUBMISSION_INFO} | awk -F ' = ' '/RequestUUID/ {print $2}')
-if [ -z "${REQUEST_UUID}" ]; then
-    echo "Errors trying to upload ${TARGET_BINARY}.zip: ${SUBMISSION_INFO}"
-    exit 6
+if [ $? -eq 0 ]; then
+  echo "Notarization submitted successfully."
+else
+  echo "Notarization failed."
+  exit 1
 fi
 
-# Wait for "Package Approved"
-while ! xcrun altool --notarization-info ${REQUEST_UUID} --username ${APPLE_ID} --password ${APP_SPECIFIC_PASSWORD} --output-format xml | grep -q 'Package Approved' ; do
-    sleep 60;
-done
-
-echo "Package Approved: REQUEST_UUID=$REQUEST_UUID can be accessed with this query: xcrun altool --notarization-info $REQUEST_UUID --username ${APPLE_ID} --output-format xml --password app_specific_password"
-
 xcrun stapler staple ${TARGET_BINARY}