Benjamin Carlsson 721f46a07a Bundle signed voice resources in macOS releases (#43983) ...

## What changed

- Build, sign, and notarize `codex-voice-host` and its native runtime for Apple Silicon and Intel macOS release packages, granting the helper audio-input access.
- Include voice resources in primary package archives and DMGs, with a root-level `codex` symlink to `bin/codex` so the runtime can be located.
- Seal runtime receipts with post-signing hashes, require matching release versions and source builds, and bundle dependency notices, licenses, and source metadata.
- Keep voice resources out of Python wheels to preserve their older macOS compatibility; the native voice build targets macOS 14.

## Testing

Add packaging tests for alpha, beta, and stable versions, signed-byte preservation, license hashes, receipt validation, tamper detection, and exclusion of unlisted files. Extend release verification to check voice architectures, signatures, build identity, package hashes, and DMG contents.

GitOrigin-RevId: 9f9415a8b2532d655a9a8740bcdf64066ddb7472

2026-09-09 02:20:06 +00:00

..

powershell

bazel: add PowerShell to Wine test harness (#28120)

2026-06-14 04:52:32 +00:00

v8

Pin V8 release manifests and prevent published release replacement (#43444)

2026-09-07 11:55:57 +00:00

voice

Bundle signed voice resources in macOS releases (#43983)

2026-09-09 02:20:06 +00:00

wezterm

Vendor ConPtySystem (#7656)

2025-12-09 17:23:51 +00:00

wine

[codex] Add hermetic Wine test support (#27964)

2026-06-12 18:24:49 -07:00