release

name	release
description	Build and release Cowboy entirely from the local machine (no CI costs)

Release

Build Cowboy locally, create GitHub Release with DMG, and update Homebrew tap.

Steps

1. Ask the user which version to release. Show current version from src-tauri/tauri.conf.json and offer to bump patch/minor/major.
2. Update version in src-tauri/Cargo.toml ([package] section, version = "X.Y.Z") to the chosen version.
3. Update version in src-tauri/tauri.conf.json (top-level "version" field) to the same version. Both files MUST match.
4. Update CHANGELOG.md -- add a new section for the version if it doesn't exist, or confirm the existing entry is up to date. Create the file if it doesn't exist.
5. Commit version bump files (src-tauri/Cargo.toml, src-tauri/tauri.conf.json, CHANGELOG.md, and any other changed files) to main.
6. Create git tag v<version> and push both main and the tag to remote.
7. Run the local release script:

   ./scripts/release.sh <version>
   

   This does everything: builds the Tauri app, signs the .app bundle with hardened runtime, notarizes and staples the .app (so the ticket travels with the .app into /Applications), creates the DMG from the stapled .app, codesigns the DMG, notarizes and staples the DMG, creates GitHub Release with DMG attached, and updates the Homebrew tap (iamsachin/homebrew-cowboy).

After the script completes

1. Verify GitHub Release: gh release view v<version>
2. Verify Homebrew tap: gh repo view iamsachin/homebrew-cowboy --web (check Formula/cowboy.rb)
3. Report a summary table with GitHub Release URL and Homebrew status.

Build-only mode (no publish)

./scripts/release.sh --build-only <version>

Builds DMG locally without creating a release or updating Homebrew.

Required Environment Variables

These must be set in ~/.zshrc (the release script validates them before building):

Variable	Purpose
APPLE_SIGN_IDENTITY	Developer ID Application identity for codesigning (e.g., Developer ID Application: Name (TEAMID))
APPLE_DEVELOPER_TEAM_ID	10-character Apple Developer Team ID
COWBOY_NOTARIZE_PROFILE	Keychain profile name for xcrun notarytool (created via xcrun notarytool store-credentials)

To set up the notarization keychain profile for the first time:

xcrun notarytool store-credentials "cowboy-notarize" --apple-id "[e-mail]" --team-id "$APPLE_DEVELOPER_TEAM_ID" --password "app-specific-password"

Rules

• Version in Cargo.toml and tauri.conf.json MUST always match.
• Do NOT use the Agent or TodoWrite tools.
• If the release fails partway, check what was published and either fix forward or clean up:
  • Delete failed release: gh release delete v<version> --yes
  • Delete tag: git tag -d v<version> && git push origin :refs/tags/v<version>
• The build command is pnpm build (which runs cargo tauri build). Do NOT run cargo directly.
• DMG output is in src-tauri/target/release/bundle/dmg/.

Security

NEVER commit API keys, signing identities, passwords, keychain profile names, or any secrets to the repository.

• All sensitive values MUST come from environment variables set in ~/.zshrc.
• Do NOT hardcode APPLE_SIGN_IDENTITY, APPLE_DEVELOPER_TEAM_ID, COWBOY_NOTARIZE_PROFILE, or any Apple credentials in scripts or config files.
• If a script needs a secret, read it from an environment variable and validate it is set before use.