Mac folk finally get their own proper crate delivered to the tavern door, one for Apple Silicon and one for Intel, each stamped so no one picks up the wrong one. First time you open yours, right-click -> Open to get past macOS’s “who sent this?” speech; Apple’s own wax costs coin we don’t yet have. The chickens remain furious.

  • GHA release: add gated Azure Trusted Signing for Client.Desktop.exe and the Windows Velopack Setup.exe; inert until the Resinhead identity validation lands (see docs/azure.md for the full setup walkthrough)
  • GHA release: add signtool verify /pa steps after each Windows sign so timestamp flakes and cert chain issues blow up in the build job instead of the user’s SmartScreen dialog
  • Bailed on Azure Trusted signing, it won’t work for Australians.
  • GHA release: extend Velopack packaging to macOS; both osx-x64 and osx-arm64 pack on macos-latest (Apple Silicon handles Intel packaging fine and dodges the shrinking macos-13 runner pool), installers sync to S3 so Mac clients get auto-updates end-to-end, and the artifacts land on the GitHub Release alongside the existing tar.gz downloads. Apple signing/notarisation stays deferred, so first launch still needs right-click -> Open.
  • GHA release: push the macOS Velopack Blight-osx-Portable.zip to itch.io’s osx-intel and osx-apple-silicon channels in place of the plain tar.gz; brings Mac itch users in line with Windows and Linux itch users on Velopack installs + in-game auto-updates. 1.4.1 shipped the mac Velopack stack to S3 and the GitHub Release but missed this one channel pair.