[education/labplot] /: CI: add re-sign step for macOS

Git commit b2cd38ed20baa6847519595a99cefa1dc47a0b45 by Stefan Gerlach.
Committed on 29/07/2026 at 13:30.
Pushed by sgerlach into branch 'master'.

CI: add re-sign step for macOS

M  +22   -9    .gitlab-ci.yml

https://invent.kde.org/education/labplot/-/commit/b2cd38ed20baa6847519595a99cefa1dc47a0b45

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index a282f17c6b..5b82ca7720 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -88,24 +88,37 @@ craft_macos_qt6_arm64:
     - if: '$CI_COMMIT_REF_NAME == "master"'
       when: manual
       allow_failure: true
-  script:          
-    - craft --package labplot
- 
+
+# extend macos base with re-sign step
+# see https://invent.kde.org/sysadmin/craft-ci/-/blob/master/gitlab-templates/blocks/macos-base.yml?ref_type=heads
+.craft_macos_base:
+  script:
+    # Set up craft settings and blueprint settings
+    - craftmaster --setup
+    # Get Craft itself ready
+    - craftmaster -c -i --options virtual.ignored=True --update craft
+    # Install all of our dependencies
+    - craftmaster -c --install-deps $CI_PROJECT_NAME
+    # Build the actual application
+    - craftmaster -c --no-cache --options $CI_PROJECT_NAME.srcDir=$CI_PROJECT_DIR/src/ $CI_PROJECT_NAME
     # Re-sign with entitlements (Craft doesn't pick them up automatically yet)
-    - |
-      APP_PATH="archive/Applications/KDE/LabPlot.app"
+    - APP_PATH="archive/Applications/KDE/LabPlot.app"
       ENTITLEMENTS="$APP_PATH/Contents/Resources/labplot.entitlements"
       if [ -f "$ENTITLEMENTS" ]; then
         echo "Applying entitlements to LabPlot.app"
-        codesign --force --deep --sign - \
-          --entitlements "$ENTITLEMENTS" \
-          "$APP_PATH"
-      
+        codesign --force --deep --sign - --entitlements "$ENTITLEMENTS" "$APP_PATH"
         echo "Verifying entitlements:"
         codesign -d --entitlements - "$APP_PATH/Contents/MacOS/labplot"
       else
         echo "Warning: Entitlements file not found at $ENTITLEMENTS"
       fi
+    # Package it up!
+    - craftmaster -c --package --options $CI_PROJECT_NAME.srcDir=$CI_PROJECT_DIR/src/ $CI_PROJECT_NAME
+    # Save our package
+    - packageDir=$(craftmaster -c -q --get "packageDestinationDir()" virtual/base)
+    - mkdir $CI_PROJECT_DIR/kde-ci-packages/
+    - cp -vf $packageDir/*.dmg $CI_PROJECT_DIR/kde-ci-packages/
+    - python3 ci-notary-service/notarizemacapp.py -v --config $KDECI_NOTARIZEMACAPP_CONFIG $CI_PROJECT_DIR/kde-ci-packages/*.dmg
 
 snap_snapcraft_lxd:
   rules: