Skip to content

contrib: remove deprecated --deep signing from macdeployqtplus#33592

Open
amishhaa wants to merge 1 commit intobitcoin:masterfrom
amishhaa:fix-deep-arg
Open

contrib: remove deprecated --deep signing from macdeployqtplus#33592
amishhaa wants to merge 1 commit intobitcoin:masterfrom
amishhaa:fix-deep-arg

Conversation

@amishhaa
Copy link
Contributor

@amishhaa amishhaa commented Oct 9, 2025

Removed the deprecated --deep flag from codesign in macdeployqtplus and replaced it with an explicit recursive signing process for all binaries, frameworks, and plugins.

Fixes #32486

Removed the deprecated --deep flag from codesign in macdeployqtplus and replaced it with an explicit recrusive signing process for all binaries, frameworks, and plugins.
@DrahtBot
Copy link
Contributor

DrahtBot commented Oct 9, 2025

The following sections might be updated with supplementary metadata relevant to reviewers and maintainers.

Code Coverage & Benchmarks

For details see: https://corecheck.dev/bitcoin/bitcoin/pulls/33592.

Reviews

See the guideline for information on the review process.

Type Reviewers
Concept ACK hebasto

If your review is incorrectly listed, please copy-paste <!--meta-tag:bot-skip--> into the comment that the bot should ignore.

Conflicts

No conflicts as of last run.

@hebasto
Copy link
Member

hebasto commented Oct 10, 2025

Concept ACK.

@fanquake fanquake changed the title Contrib: Updated macdeployqtplus to remove deprecated --deep signing contrib: remove deprecated --deep signing from macdeployqtplus Oct 10, 2025
@sedited
Copy link
Contributor

sedited commented Mar 5, 2026

Could somebody with a Mac try this out? It's been open for a while, but I'm having a hard time judging its correctness.

Copy link
Member

@hebasto hebasto left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested 3ef0103 on macOS Tahoe 26.2 as follows:

% cmake -B build -DBUILD_GUI=ON
% cmake --build build -t bitcoin-qt deploy
% codesign --verify --deep --strict --verbose=4 build/dist/Bitcoin-Qt.app

Comment on lines +521 to +534
plugins_path = os.path.join(contents_path, "PlugIns")
if os.path.exists(plugins_path):
for root, _, files in os.walk(plugins_path):
for f in files:
full_path = os.path.join(root, f)
if is_macho_executable(full_path):
sign_item(full_path, identity)

macos_path = os.path.join(contents_path, "MacOS")
if os.path.exists(macos_path):
for f in os.listdir(macos_path):
full_path = os.path.join(macos_path, f)
if os.path.isfile(full_path) and is_macho_executable(full_path):
sign_item(full_path, identity)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

My tests also pass without this snippet for some reason.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

build: deprecated arg usage in macOS deploy script

4 participants