From 78657d496e88aff6bf83ffdfd8e39aa51b4e526a Mon Sep 17 00:00:00 2001 From: Arvin Xu Date: Sun, 7 Jun 2026 19:20:26 +0800 Subject: [PATCH] =?UTF-8?q?=F0=9F=90=9B=20fix(desktop):=20pin=20electron-b?= =?UTF-8?q?uilder=20to=2026.14.0=20to=20fix=20broken=20macOS=20update=20si?= =?UTF-8?q?gning=20(#15527)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit electron-builder was floating on `^26.8.1` and the repo commits no lockfile, so each CI build resolved a fresh version. The canary.12 build (2026-06-07) picked up 26.15.0, which regressed macOS .app bundle signing: codesign reports "bundle format is ambiguous (could be app or framework)" and Squirrel.Mac rejects the update during code-signature validation, so the app never quits to install — surfacing as "auto-update does nothing". 26.15.0 introduced the two suspect changes (mac signing rework #9822 and the full app-builder-bin Go→TS replacement #9829). 26.14.0 predates both and does not touch macOS app-bundle signing/layout. Pinning the exact version cascades to app-builder-lib / dmg-builder / builder-util (electron-builder pins those exactly), stopping the toolchain from floating across CI installs. Co-authored-by: Claude Opus 4.8 --- apps/desktop/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/desktop/package.json b/apps/desktop/package.json index 67d2a159e4..09138ea202 100644 --- a/apps/desktop/package.json +++ b/apps/desktop/package.json @@ -78,7 +78,7 @@ "cross-env": "^10.1.0", "diff": "^8.0.4", "electron": "41.3.0", - "electron-builder": "^26.8.1", + "electron-builder": "26.14.0", "electron-devtools-installer": "4.0.0", "electron-is": "^3.0.0", "electron-store": "^8.2.0",