fixes

Author: shivanshtalwar0

.github/workflows/release-tauri.yml

@@ -93,6 +93,8 @@ jobs:
             | macOS | `.dmg` (Apple Silicon and/or Intel) |
             | Windows | `.msi` or `.exe` |
             | Linux | `.AppImage` |
+
+            **macOS:** Builds are **not notarized**. On **Apple Silicon**, use the **aarch64** `.dmg`. If you see *“Aerosol is damaged”*, that is usually **Gatekeeper** — [fix in the manual](https://aerosol.januscaler.com/manual#macos-install-github-release-builds) (e.g. `xattr -cr /Applications/Aerosol.app` or right-click → **Open**).
           releaseDraft: false
           prerelease: false
           uploadUpdaterJson: false
@@ -116,6 +118,15 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: bash .github/scripts/resolve-release-installers.sh "${{ github.repository }}" "${{ github.ref_name }}" >> "$GITHUB_OUTPUT"
 
+      - name: Write latest-release.json for download page (same-origin fetch in browser)
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        continue-on-error: true
+        run: |
+          gh api "repos/${{ github.repository }}/releases/latest" \
+            --jq '{tag_name: .tag_name, html_url: .html_url, published_at: .published_at, assets: [.assets[] | {name, browser_download_url, size}]}' \
+            > website/public/latest-release.json
+
       - name: Setup Node
         uses: actions/setup-node@v4
         with:

.github/workflows/website-docker.yml

@@ -28,6 +28,15 @@ jobs:
         id: webver
         run: echo "version=$(node -p "require('./website/package.json').version")" >> "$GITHUB_OUTPUT"
 
+      - name: Write latest-release.json for download page
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        continue-on-error: true
+        run: |
+          gh api "repos/${{ github.repository }}/releases/latest" \
+            --jq '{tag_name: .tag_name, html_url: .html_url, published_at: .published_at, assets: [.assets[] | {name, browser_download_url, size}]}' \
+            > website/public/latest-release.json
+
       - name: Docker Hub login
         uses: docker/login-action@v3
         with:

.gitignore

@@ -35,6 +35,9 @@ website/.env
 website/.env.*
 !website/.env.example
 
+# Generated in CI from GitHub API; copied into the static site for download links.
+website/public/latest-release.json
+
 # VitePress under other paths in the future
 **/.vitepress/dist/
 **/.vitepress/cache/

README.md

@@ -65,6 +65,10 @@ npm run tauri build
 
 Installers and bundles appear under `src-tauri/target/release/bundle/` (exact layout depends on OS and Tauri bundle settings in [`src-tauri/tauri.conf.json`](src-tauri/tauri.conf.json)).
 
+### macOS: “damaged” or can’t open (unsigned builds)
+
+GitHub Actions builds are **not** notarized. On **Apple Silicon**, use the **aarch64** `.dmg`. If macOS says the app is **damaged**, that is usually **Gatekeeper** — see the [user manual](website/manual.md#macos-install-github-release-builds) (`xattr -cr`, **Open Anyway**, or right-click **Open**). For distribution without warnings, set up **Developer ID signing + notarization** ([Tauri docs](https://v2.tauri.app/distribute/sign/macos/)).
+
 ## Documentation & marketing site
 
 The public site (landing, manual, comparison page, download buttons) lives in **`website/`**. It is intended to be served at **https://aerosol.januscaler.com** (Docker/Caddy in-repo, or any static host). See [`website/README.md`](website/README.md) for deployment details.

src-tauri/tauri.conf.json

@@ -24,6 +24,10 @@
   "bundle": {
     "active": true,
     "targets": "all",
+    "macOS": {
+      "signingIdentity": "-",
+      "hardenedRuntime": false
+    },
     "icon": [
       "icons/icon.icns",
       "icons/icon.ico",