Fixed
- macOS release binaries are Developer ID signed and notarized again. Adding the
git-remote-entirebinary in 0.7.0 gave the release builds explicit ids that no longer matched the notarization step's default filter, so 0.7.0 shipped ad-hoc-signed binaries that macOS Gatekeeper refused to run — surfacing as Homebrew shell-completion errors andkilledon launch (#1324)
Housekeeping
- The release workflow now fails closed when any macOS binary is not Developer ID signed, so an un-notarized build can no longer ship silently (#1324)