Channing Conger a453588416 Sign bundled macOS helper binaries (#35264) ...

## Why

The macOS release workflow fetched `rg` and zsh while assembling package
archives, after the signing stage. This left the bundled helper executables
outside the workflow's signing and notarization checks.

## What changed

- Fetch, sign, notarize, and upload the pinned macOS `rg` and zsh binaries with
  the other release artifacts.
- Build package archives from those signed helpers via `--rg-bin` and the new
  `--zsh-bin` override.
- Verify the helpers' architecture, signatures, and absence of entitlements in
  the final package.

## Testing

- Cover the prebuilt zsh override and verify that package assembly preserves
  the supplied helper binaries.

GitOrigin-RevId: a3865c04fa2f0f4df32e627ee7202bc87bdc3241

2026-07-24 23:44:55 +00:00

..

actions

ci: route build IO through Dev Drives (#31357)

2026-07-08 14:06:37 -07:00

codex

Fix minor typos in comments and documentation (#10287)

2026-01-30 22:11:02 -08:00

ISSUE_TEMPLATE

feat(cli): add codex doctor diagnostics (#22336)

2026-05-13 21:23:19 +00:00

scripts

Sign bundled macOS helper binaries (#35264)

2026-07-24 23:44:55 +00:00

workflows

Sign bundled macOS helper binaries (#35264)

2026-07-24 23:44:55 +00:00

blob-size-allowlist.txt

fix(guardian) Dont hard error on feature disable (#18795)

2026-04-20 19:54:39 -07:00

CODEOWNERS

Expand agent core ownership (#31675)

2026-07-08 18:04:44 -07:00

codex-cli-splash.png

Replaced user documentation with links to developers docs site (#8662)

2026-01-02 13:01:53 -07:00

dependabot.yaml

[codex] Apply a Dependabot cooldown of 7 days (#21599)

2026-05-07 16:07:46 -07:00

dotslash-argument-comment-lint-config.json

Publish runnable DotSlash package for argument-comment lint (#15198)

2026-03-19 18:59:02 +00:00

dotslash-config.json

dotslash: publish Codex entrypoints from package archives (#23638)

2026-05-20 12:18:10 -07:00

dotslash-zsh-config.json

release: publish standalone zsh artifacts (#30114)

2026-06-25 13:56:08 -07:00

pull_request_template.md

Clarify PR template invitation requirement (#19912)

2026-04-27 21:45:15 -07:00