chore(release): publish

- @standardnotes/[email protected] - @standardnotes/[email protected] - @standardnotes/[email protected] - @standardnotes/[email protected] - @standardnotes/[email protected] - @standardnotes/[email protected] - @standardnotes/[email protected]
chore: fix white screen issue on windows
2026-09-13 00:45:26 -04:00 · 2023-11-23 11:41:11 +00:00 · 2023-11-23 16:41:32 +05:30 · 2023-11-21 13:47:51 +00:00 · 2023-11-21 18:46:50 +05:30 · 2023-11-21 18:44:09 +05:30
398 changed files with 10460 additions and 5033 deletions
@@ -9,101 +9,141 @@ updates:
    directory: "/"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/api"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/desktop"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/encryption"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/features"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/filepicker"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/files"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/icons"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/mobile"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/models"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/releases"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/responses"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/services"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/sncrypto-common"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/sncrypto-web"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/snjs"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/styles"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/toast"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/utils"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "npm"
    directory: "/packages/web"
    schedule:
      interval: "daily"
+    allow:
+      - dependency-type: "direct"

  - package-ecosystem: "github-actions"
    directory: "/"
@@ -13,6 +13,7 @@ jobs:
    env:
      CSC_LINK: ${{ secrets.MAC_CI_KEYS }}
      CSC_KEY_PASSWORD: ${{ secrets.MAC_CI_KEYS_PASSWORD }}
+      APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
      NOTARIZE_APPLE_ID: ${{ secrets.NOTARIZE_APPLE_ID }}
      NOTARIZE_APPLE_ID_PASSWORD: ${{ secrets.NOTARIZE_APPLE_ID_PASSWORD }}
    defaults:
@@ -122,25 +123,68 @@ jobs:
            packages/desktop/dist/*.yaml

  Windows:
-    runs-on: self-hosted
-    env:
-      WINDOWS_TOKEN_ALIAS: ${{ secrets.WINDOWS_TOKEN_ALIAS }}
-      WINDOWS_TOKEN_PASSWORD: ${{ secrets.WINDOWS_TOKEN_PASSWORD }}
+    runs-on: windows-latest
+
    defaults:
      run:
        working-directory: packages/desktop
+
    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Setup Node
+        uses: actions/setup-node@v3
        with:
          registry-url: 'https://registry.npmjs.org'
          node-version-file: '.nvmrc'
          cache: 'yarn'
-      - run: yarn install --immutable
-      - run: yarn build:desktop
-      - run: yarn run webpack --config desktop.webpack.prod.js
-      - run: echo APP_VERSION=$(node -p "require('./../web/package.json').version") >> $GITHUB_ENV
-      - run: yarn run electron-builder --windows --x64 --ia32 --publish=never --c.extraMetadata.version=${{ env.APP_VERSION }}
+
+      - name: Install Dependencies
+        run: yarn install --immutable
+
+      - name: Build
+        run: yarn build:desktop
+
+      - name: Webpack
+        run: yarn run webpack --config desktop.webpack.prod.js
+
+      - name: Set up certificate
+        run: |
+          echo "${{ secrets.SM_CLIENT_CERT_FILE_B64 }}" | base64 --decode > /d/Certificate_pkcs12.p12
+        shell: bash
+
+      - name: Set variables
+        id: variables
+        run: |
+          echo "version=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
+          echo "KEYPAIR_NAME=snkeypair" >> $GITHUB_OUTPUT
+          echo "CERTIFICATE_NAME=sncertificate" >> $GITHUB_OUTPUT
+          echo "SM_HOST=${{ secrets.SM_HOST }}" >> "$GITHUB_ENV"
+          echo "SM_API_KEY=${{ secrets.SM_API_KEY }}" >> "$GITHUB_ENV"
+          echo "SM_CLIENT_CERT_FILE=D:\\Certificate_pkcs12.p12" >> "$GITHUB_ENV"
+          echo "SM_CLIENT_CERT_PASSWORD=${{ secrets.SM_CLIENT_CERT_PASSWORD }}" >> "$GITHUB_ENV"
+          echo "C:\Program Files (x86)\Windows Kits\10\App Certification Kit" >> $GITHUB_PATH
+          echo "C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools" >> $GITHUB_PATH
+          echo "C:\Program Files\DigiCert\DigiCert Keylocker Tools" >> $GITHUB_PATH
+        shell: bash
+
+      - name: Setup Keylocker KSP on windows
+        run: |
+          curl -X GET  https://one.digicert.com/signingmanager/api-ui/v1/releases/Keylockertools-windows-x64.msi/download -H "x-api-key:%SM_API_KEY%" -o Keylockertools-windows-x64.msi
+          msiexec /i Keylockertools-windows-x64.msi /quiet /qn
+          smksp_registrar.exe list
+          smctl.exe keypair ls
+          C:\Windows\System32\certutil.exe -csp "DigiCert Signing Manager KSP" -key -user
+        shell: cmd
+
+      - name: Certificates Sync
+        run: |
+           smctl windows certsync
+        shell: cmd
+
+      - name: Build & Sign With Electron Builder
+        run: yarn run electron-builder --windows --x64 --ia32 --publish=never --c.extraMetadata.version=$(node -p "require('./../web/package.json').version")

      - name: Upload
        uses: actions/[email protected]
@@ -1,55 +0,0 @@
-name: Desktop Windows Sign & Release
-
-on:
-  workflow_dispatch:
-
-jobs:
-  Windows:
-    runs-on: self-hosted
-    env:
-      WINDOWS_TOKEN_ALIAS: ${{ secrets.WINDOWS_TOKEN_ALIAS }}
-      WINDOWS_TOKEN_PASSWORD: ${{ secrets.WINDOWS_TOKEN_PASSWORD }}
-
-    defaults:
-      run:
-        working-directory: packages/desktop
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
-        with:
-          registry-url: 'https://registry.npmjs.org'
-          node-version-file: '.nvmrc'
-          cache: 'yarn'
-      - run: yarn install --immutable
-      - run: yarn build:desktop
-      - run: yarn run webpack --config desktop.webpack.prod.js
-      - run: echo APP_VERSION=$(node -p "require('./../web/package.json').version") >> $GITHUB_ENV
-      - run: yarn run electron-builder --windows --x64 --ia32 --publish=never --c.extraMetadata.version=${{ env.APP_VERSION }}
-
-      - name: Upload
-        uses: actions/[email protected]
-        with:
-          name: assets
-          path: |
-            packages/desktop/dist/*.blockmap
-            packages/desktop/dist/*.exe
-            packages/desktop/dist/*.yml
-            packages/desktop/dist/*.yaml
-
-  Publish:
-    runs-on: ubuntu-latest
-    needs: [Windows]
-    defaults:
-      run:
-        working-directory: packages/desktop
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
-        with:
-          registry-url: 'https://registry.npmjs.org'
-          node-version-file: '.nvmrc'
-          cache: 'yarn'
-      - uses: actions/download-artifact@v3
-        with:
-          name: assets
-          path: packages/desktop/dist
@@ -84,28 +84,28 @@ jobs:
          trigger_workflow: true
          wait_workflow: true

-  # e2e-vaults:
-  #   name: E2E Vaults Test Suite
-  #   needs: build-docker
-  #   runs-on: ubuntu-latest
-  #   steps:
-  #     - name: Run E2E vaults test suite
-  #       if: "${{ contains(github.event.head_commit.message, 'skip e2e') == false }}"
-  #       uses: convictional/trigger-workflow-and-wait@master
-  #       with:
-  #         owner: standardnotes
-  #         repo: server
-  #         github_token: ${{ secrets.CI_PAT_TOKEN }}
-  #         workflow_file_name: e2e-test-suite.yml
-  #         wait_interval: 30
-  #         client_payload: '{"snjs_image_tag": "${{ github.sha }}", "suite": "vaults", "author": "${{ github.actor }}", "ref_name": "app:${{ github.ref }}"}'
-  #         propagate_failure: true
-  #         trigger_workflow: true
-  #         wait_workflow: true
+  e2e-vaults:
+    name: E2E Vaults Test Suite
+    needs: build-docker
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run E2E vaults test suite
+        if: "${{ contains(github.event.head_commit.message, 'skip e2e') == false }}"
+        uses: convictional/trigger-workflow-and-wait@master
+        with:
+          owner: standardnotes
+          repo: server
+          github_token: ${{ secrets.CI_PAT_TOKEN }}
+          workflow_file_name: e2e-test-suite.yml
+          wait_interval: 30
+          client_payload: '{"snjs_image_tag": "${{ github.sha }}", "suite": "vaults", "author": "${{ github.actor }}", "ref_name": "app:${{ github.ref }}"}'
+          propagate_failure: true
+          trigger_workflow: true
+          wait_workflow: true

  publish:
    name: Publish to NPM
-    needs: [e2e-base]
+    needs: [e2e-base, e2e-vaults]
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
@@ -143,7 +143,7 @@ jobs:

  publish-docker:
    name: Publish to Docker Hub
-    needs: [e2e-base]
+    needs: [e2e-base, e2e-vaults]
    runs-on: ubuntu-latest
    steps:
      - name: Login to Docker Hub
@@ -37,7 +37,7 @@ jobs:
      - name: Install dependencies
        run: yarn install --immutable
      - name: Build
-        run: yarn build:snjs
+        run: yarn build:web
      - name: ESLint
        run: yarn lint
      - name: Test
@@ -91,20 +91,20 @@ jobs:
          trigger_workflow: true
          wait_workflow: true

-  # e2e-vaults:
-  #   name: E2E Vaults Test Suite
-  #   needs: build-docker
-  #   runs-on: ubuntu-latest
-  #   steps:
-  #     - name: Run E2E vaults test suite
-  #       uses: convictional/trigger-workflow-and-wait@master
-  #       with:
-  #         owner: standardnotes
-  #         repo: server
-  #         github_token: ${{ secrets.CI_PAT_TOKEN }}
-  #         workflow_file_name: e2e-test-suite.yml
-  #         wait_interval: 30
-  #         client_payload: '{"snjs_image_tag": "${{ github.sha }}", "suite": "vaults", "author": "${{ github.actor }}", "ref_name": "app:${{ github.ref }}"}'
-  #         propagate_failure: true
-  #         trigger_workflow: true
-  #         wait_workflow: true
+  e2e-vaults:
+    name: E2E Vaults Test Suite
+    needs: build-docker
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run E2E vaults test suite
+        uses: convictional/trigger-workflow-and-wait@master
+        with:
+          owner: standardnotes
+          repo: server
+          github_token: ${{ secrets.CI_PAT_TOKEN }}
+          workflow_file_name: e2e-test-suite.yml
+          wait_interval: 30
+          client_payload: '{"snjs_image_tag": "${{ github.sha }}", "suite": "vaults", "author": "${{ github.actor }}", "ref_name": "app:${{ github.ref }}"}'
+          propagate_failure: true
+          trigger_workflow: true
+          wait_workflow: true
--- a/Show More
+++ b/Show More