v0.5.2¶
Release Date: 2026-10-07
Highlights¶
- Release DMGs Install Again on macOS 15 - App bundles are now ad-hoc code-signed, so Gatekeeper offers the standard "Open Anyway" path instead of reporting the download as damaged
What's Fixed¶
Release DMGs Install Again on macOS 15¶
The v0.5.1 DMGs were built correctly but could not be opened after download. The release workflow assembled the .app by copying the binary and Info.plist into a folder and never ran codesign, so the published bundles carried only the linker's automatic signature. On a quarantined download, macOS 15 Gatekeeper reported the Apple Silicon and Intel builds as "damaged and can't be opened" (a present but invalid signature, with no way past it) and the Universal build as "Apple could not verify ... free of malware".
Both build jobs now sign the whole bundle ad-hoc and verify it before creating the DMG. Ad-hoc signing is not notarization, so first launch still shows the "could not verify" prompt; open System Settings → Privacy & Security and click Open Anyway, after which the prompt does not recur. The README now documents this. Developer ID signing and notarization, which removes the prompt entirely, is tracked as a follow-on item.
This release contains no application code changes; the desktop sources are identical to v0.5.1.
Infrastructure¶
- Release workflow ad-hoc signs and verifies the app bundle in both build jobs before packaging the DMG; previously bundles carried only the linker's automatic signature, which Gatekeeper reported as "damaged" on quarantined downloads of the thin builds and as unverified for the universal build (
5284935)
Documentation¶
- README install note explaining the first-launch Gatekeeper prompt for ad-hoc signed builds and the System Settings → Privacy & Security → Open Anyway step
Download¶
| Platform | Download |
|---|---|
| macOS Universal | PlexusOneDesktop-0.5.2-macos-universal.dmg |
| macOS Apple Silicon | PlexusOneDesktop-0.5.2-macos-arm64.dmg |
| macOS Intel | PlexusOneDesktop-0.5.2-macos-x86_64.dmg |