chore(deps): refresh packages and bundled engines

- update Lucide and compatible transitive Rust locks

- refresh Windows/Linux FFmpeg payloads with verified source hashes

- verify macOS release checks against the mounted DMG artifact
This commit is contained in:
NimBold
2026-08-26 21:39:29 +03:30
parent 4d33f9790f
commit c2a6e3d113
7 changed files with 51 additions and 19 deletions
+8
View File
@@ -15,3 +15,11 @@ test('release Linux dependency installation is mirror-normalized and bounded', (
assert.equal((releaseWorkflow.match(/timeout --foreground --signal=TERM --kill-after=30s 10m apt-get/g) || []).length, 2);
assert.doesNotMatch(releaseWorkflow, /^\s*sudo apt-get (update|install)/m);
});
test('macOS release verification uses the app mounted from the final DMG', () => {
assert.match(releaseWorkflow, /npm run verify:macos-signing -- --dmg "\$DMG"/);
assert.match(releaseWorkflow, /hdiutil attach -nobrowse -readonly -mountpoint "\$MOUNT_POINT" "\$DMG"/);
assert.match(releaseWorkflow, /find "\$MOUNT_POINT" -maxdepth 1 -type d -name 'Firelink\.app'/);
assert.match(releaseWorkflow, /node scripts\/verify-binaries\.js --search-root "\$APP"/);
assert.doesNotMatch(releaseWorkflow, /verify:macos-signing -- --app "\$APP" --dmg/);
});