Repository navigation
error: Signature will not be accepted by Gatekeeper! in macos15-release-pkg build #4527
Description
Today's nightly build has failed for macos15-release-pkg.
https://ci-release.nodejs.org/job/iojs+release/12172/nodes=macos15-release-pkg/console
07:07:28 sh tools/osx-notarize.sh v27.0.0-nightly20261019fccdbc8b99
07:07:28 Notarization process is done with Notarytool.
07:07:28 Submitting node-v27.0.0-nightly20261019fccdbc8b99.pkg for notarization...
07:07:29 Conducting pre-submission checks for node-v27.0.0-nightly20261019fccdbc8b99.pkg and initiating connection to the Apple notary service...
07:07:30 Submission ID received
07:07:30 id: 5bc0c6ac-b3a7-44b9-b458-f496869a90fa
07:07:35 Successfully uploaded file
07:07:35 id: 5bc0c6ac-b3a7-44b9-b458-f496869a90fa
07:07:35 path: /Users/admin/build/ws/node-v27.0.0-nightly20261019fccdbc8b99.pkg
07:07:35 Waiting for processing to complete.
07:07:40
07:08:26 Current status: In Progress...
07:08:26 Current status: In Progress....
07:08:26 Current status: In Progress.....
07:08:26 Current status: In Progress......
07:08:30 Current status: In Progress.......
07:08:30 Current status: In Progress........
07:08:30 Current status: In Progress.........
07:08:30 Current status: Accepted..........Processing complete
07:08:30 id: 5bc0c6ac-b3a7-44b9-b458-f496869a90fa
07:08:30 status: Accepted
07:08:38
07:08:38 Notarization node-v27.0.0-nightly20261019fccdbc8b99.pkg submitted successfully.
07:08:39 node-v27.0.0-nightly20261019fccdbc8b99.pkg: rejected
07:08:39 source=Unnotarized Developer ID
error: Signature will not be accepted by Gatekeeper!
make: *** [node-v27.0.0-nightly20261019fccdbc8b99.pkg] Error 1
Builds from yesterday succeeded.
I've requested a rerun to see if this is persistent: https://ci-release.nodejs.org/job/iojs+release/12173/nodes=macos15-release-pkg/console
Activity
richardlau commentedon Oct 19, 2026
Rerun has failed in the same way.
@ryanaslett is this something you can look into?
tools: retry Gatekeeper check and stapling after notarization
ryanaslett commentedon Oct 19, 2026
I added a retry loop with claude's help to the osx-notarize.sh script. Im not at all sure how this would get/should get backported to other release lines, so an assist with that would be helpful (unless that naturally gets done)
richardlau commentedon Oct 20, 2026
For record keeping:
Today's nightly failed the same way https://ci-release.nodejs.org/job/iojs+release/12174/nodes=macos15-release-pkg/
However a later v8-canary build succeeded https://ci-release.nodejs.org/job/iojs+release/nodes=macos15-release-pkg/12176/console
nodejs/node#66855 should cherry-pick cleanly to the other release lines, but for inclusion into the security releases it would need to be handled by the security releasers cc @RafaelGSS @aduh95 @ruyadorno
tools: retry Gatekeeper check and stapling after notarization
richardlau commentedon Oct 20, 2026
Ran a test build on nodejs/node@1b5fc14 but it didn't trigger the retry loop (at least it succeeded to show we haven't broken the script): https://ci-release.nodejs.org/job/iojs+release/nodes=macos15-release-pkg/12177/console