tarunoai ac54a05173 Add a Signer Service backend for macOS notarization (#60695) ...

## What changed

Allow `APPLE_NOTARIZATION_BACKEND=signer-service` to sign Apple notarization JWTs through `grpcurl`, using GitHub OIDC authentication. Validate the returned signing key and algorithm, and redact transport and signing failure details.

Keep Azure Key Vault as the default backend and skip its configuration requirements when Signer Service is selected.

## Testing

Add coverage for JWT refresh with fresh OIDC tokens and for the binary wrapper running without Azure configuration. All six notarization tests pass.

GitOrigin-RevId: e38ea90e94639d87c11ab075c999d85b61b37c17

2026-11-11 00:58:44 +00:00

..

actions

Add a shared Windows Bazel setup action (#60010)

2026-11-06 23:48:38 +00:00

codex

Fix minor typos in comments and documentation (#10287)

2026-01-30 22:11:02 -08:00

ISSUE_TEMPLATE

feat(cli): add codex doctor diagnostics (#22336)

2026-05-13 21:23:19 +00:00

scripts

Add a Signer Service backend for macOS notarization (#60695)

2026-11-11 00:58:44 +00:00

workflows

Use hermetic LLVM for Windows MSVC Bazel builds (#60507)

2026-11-10 03:02:25 +00:00

blob-size-allowlist.txt

Add GPT-6-Astra to the bundled model catalog (#42607)

2026-09-03 20:05:58 +00:00

CODEOWNERS

Expand agent core ownership (#31675)

2026-07-08 18:04:44 -07:00

codex-cli-splash.png

Replaced user documentation with links to developers docs site (#8662)

2026-01-02 13:01:53 -07:00

dependabot.yaml

Remove the repository devcontainer configurations (#43915)

2026-09-08 21:19:02 +00:00

dotslash-argument-comment-lint-config.json

Publish runnable DotSlash package for argument-comment lint (#15198)

2026-03-19 18:59:02 +00:00

dotslash-config.json

Remove Bazel outputs from DotSlash release configs (#58757)

2026-11-01 20:41:58 +00:00

dotslash-provisioned-config.json

Remove Bazel outputs from DotSlash release configs (#58757)

2026-11-01 20:41:58 +00:00