📦 deps(thirdparty): update snapshots

antigravity-awesome-skills/skills/macos-spm-app-packaging/assets/templates/setup_dev_signing.sh

@@ -14,8 +14,13 @@ fi
 
 echo "Creating self-signed certificate '$CERT_NAME'..."
 
-TEMP_CONFIG=$(mktemp)
-trap "rm -f $TEMP_CONFIG" EXIT
+TEMP_DIR=$(mktemp -d)
+chmod 700 "$TEMP_DIR"
+TEMP_CONFIG="$TEMP_DIR/dev.cnf"
+KEY_PATH="$TEMP_DIR/dev.key"
+CRT_PATH="$TEMP_DIR/dev.crt"
+P12_PATH="$TEMP_DIR/dev.p12"
+trap 'rm -rf "$TEMP_DIR"' EXIT
 
 cat > "$TEMP_CONFIG" <<EOFCONF
 [ req ]
@@ -34,18 +39,16 @@ extendedKeyUsage = codeSigning
 EOFCONF
 
 openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 \
-    -nodes -keyout /tmp/dev.key -out /tmp/dev.crt \
+    -nodes -keyout "$KEY_PATH" -out "$CRT_PATH" \
     -config "$TEMP_CONFIG" 2>/dev/null
 
-openssl pkcs12 -export -out /tmp/dev.p12 \
-    -inkey /tmp/dev.key -in /tmp/dev.crt \
+openssl pkcs12 -export -out "$P12_PATH" \
+    -inkey "$KEY_PATH" -in "$CRT_PATH" \
     -passout pass: 2>/dev/null
 
-security import /tmp/dev.p12 -k ~/Library/Keychains/login.keychain-db \
+security import "$P12_PATH" -k ~/Library/Keychains/login.keychain-db \
   -T /usr/bin/codesign -T /usr/bin/security
 
-rm -f /tmp/dev.{key,crt,p12}
-
 echo ""
 echo "Trust this certificate for code signing in Keychain Access."
 echo "Then export in your shell profile:"

antigravity-awesome-skills/skills/macos-spm-app-packaging/assets/templates/sign-and-notarize.sh

@@ -13,8 +13,13 @@ if [[ -z "${APP_STORE_CONNECT_API_KEY_P8:-}" || -z "${APP_STORE_CONNECT_KEY_ID:-
   exit 1
 fi
 
-echo "$APP_STORE_CONNECT_API_KEY_P8" | sed 's/\\n/\n/g' > /tmp/app-store-connect-key.p8
-trap 'rm -f /tmp/app-store-connect-key.p8 /tmp/${APP_NAME}Notarize.zip' EXIT
+TEMP_DIR=$(mktemp -d)
+chmod 700 "$TEMP_DIR"
+KEY_PATH="$TEMP_DIR/app-store-connect-key.p8"
+NOTARY_ZIP="$TEMP_DIR/${APP_NAME}Notarize.zip"
+trap 'rm -rf "$TEMP_DIR"' EXIT
+
+echo "$APP_STORE_CONNECT_API_KEY_P8" | sed 's/\\n/\n/g' > "$KEY_PATH"
 
 ARCHES_VALUE=${ARCHES:-"arm64 x86_64"}
 ARCH_LIST=( ${ARCHES_VALUE} )
@@ -31,10 +36,10 @@ codesign --force --timestamp --options runtime --sign "$APP_IDENTITY" \
   "$APP_BUNDLE"
 
 DITTO_BIN=${DITTO_BIN:-/usr/bin/ditto}
-"$DITTO_BIN" --norsrc -c -k --keepParent "$APP_BUNDLE" "/tmp/${APP_NAME}Notarize.zip"
+"$DITTO_BIN" --norsrc -c -k --keepParent "$APP_BUNDLE" "$NOTARY_ZIP"
 
-xcrun notarytool submit "/tmp/${APP_NAME}Notarize.zip" \
-  --key /tmp/app-store-connect-key.p8 \
+xcrun notarytool submit "$NOTARY_ZIP" \
+  --key "$KEY_PATH" \
   --key-id "$APP_STORE_CONNECT_KEY_ID" \
   --issuer "$APP_STORE_CONNECT_ISSUER_ID" \
   --wait