Sign and notarize macOS app before Homebrew deadline (2026-09-01)

[shunichironomura]

Homebrew is ending support for casks that fail Gatekeeper checks in the official homebrew/cask tap on September 1, 2026. This removal policy does not prohibit distributing an unsigned or unnotarized cask through our own tap, so the date is not a hard publishing deadline for procnote.

However, Homebrew 5.0.0 removed support for the --no-quarantine flag for all taps, including third-party taps. An unsigned procnote build installed from our own tap therefore still requires users to run xattr -cr /Applications/procnote.app before it can be launched. Homebrew maintainers have confirmed that this post-processing is required for unsigned software distributed through a custom tap.

Signing and notarizing the macOS app is still necessary to provide a normal, frictionless installation, remove the xattr workaround, and make procnote eligible for the official homebrew/cask tap in the future.

What needs to be done

• Set up an Apple Developer account (if not already)
• Configure code signing in the Tauri build / release workflow
• Configure notarization (submit to Apple's notarization service as part of CI)
• Remove the xattr workaround from the README once signing is in place

References

• Homebrew: Deprecation of --no-quarantine flag
• Homebrew: Removing support for --no-quarantine for casks
• What Homebrew 5.0.0 means for your Mac fleet