Notarization zip doesn't keep symbolic links and permissions #509

Activity

1. fvarrui

   added

   bugSomething isn't workingSomething isn't working

   on Oct 11, 2026
2. fvarrui

   added a commit that references this issue on Oct 11, 2026

   Fix the bugs found while documenting 2.0.0

   ...

   29e3392
3. fvarrui commented on Oct 11, 2026

   

   fvarrui

   on Oct 11, 2026

   CollaboratorAuthor

   More actions

   Fixed in devel (29e3392): the notarization zip is made with ditto -c -k --keepParent, which keeps symbolic links and permissions, and a missing keyChainProfile fails early with a clear message. Notarization needs an Apple Developer account, so it isn't tested in CI: feedback is welcome.

   It will ship in 2.0.1, and I'll close this issue then.

   How to test 2.0.1-SNAPSHOT

   Important

   Since 2.0.0 the groupId, the Gradle plugin id and the Java packages are io.github.javapackager (see Upgrading to 2.0).

   Maven, add the snapshots repository and use the snapshot version:

   <pluginRepositories>
       <pluginRepository>
           <id>central-portal-snapshots</id>
           <url>https://central.sonatype.com/repository/maven-snapshots/</url>
           <releases><enabled>false</enabled></releases>
           <snapshots><enabled>true</enabled></snapshots>
       </pluginRepository>
   </pluginRepositories>
   [...]
   <plugin>
       <groupId>io.github.javapackager</groupId>
       <artifactId>javapackager</artifactId>
       <version>2.0.1-SNAPSHOT</version>
       [...]
   </plugin>

   Gradle, add the snapshots repository in settings.gradle:

   pluginManagement {
       repositories {
           maven { url = 'https://central.sonatype.com/repository/maven-snapshots/' }
           gradlePluginPortal()
       }
   }

   and use the snapshot version in build.gradle:

   plugins {
       id 'io.github.javapackager' version '2.0.1-SNAPSHOT'
   }

   See Snapshot versions for more.
4. fvarrui

   added

   fixedIssue fixed and release pendingIssue fixed and release pending

   on Oct 11, 2026