Upgrade gon to notarytool

[amlwwalker]

When notorizing using gon, the following message is displayed. Is there a plan to upgrade gon?
Thanks

	<array>
		<dict>
			<key>code</key>
			<integer>-1030</integer>
			<key>message</key>
			<string>altool has been deprecated for notarization and starting in late 2023 will no longer be supported by the Apple notary service. You should start using notarytool to notarize your software.</string>
			<key>userInfo</key>
			<dict>
				<key>NSLocalizedDescription</key>
				<string>altool has been deprecated for notarization and starting in late 2023 will no longer be supported by the Apple notary service. You should start using notarytool to notarize your software.</string>
			</dict>
		</dict>
	</array>

[mnestor]

I did a hack and slash to get notifytool working. I want to go back and do it with the api so maybe I can offload it to a linux CI system.

https://github.com/mnestor/gon/releases/tag/v1.1.0

[mountaindude]

I've used gon for quite some time, awesome tool.

A while back I needed more control over the notarization process in various GitHub actions, the solution was to sign and notarize the apps using more low-level commands.
More code than using gon but works well.

If someone is interested, the action is available here.

[AnjirwalaAnuj]

Hi @mitchellh, can you please provide an estimated timeline for the upgrade to notarytool.

[bdon]

The Apple docs now state:

Apple has deprecated altool for the purposes of notarization and announced that it will stop working for notarization on 2023-11-01. However, altool is still a good way to perform other tasks, like submitting an app to the App Store.

@mnestor + @mountaindude thanks for posting the workarounds!

[michaelquigley]

This is a showstopper for github.com/openziti/zrok.

[michaelquigley]

This is a showstopper for github.com/openziti/zrok.

The issue with the zrok build was coming from gon, but the notarytool message is (currently) just a warning. Come to find out there were unacknowledged terms and conditions in the Apple account that were preventing signing. So, we're back in good shape for now.

Would definitely like to get in front of the notarytool thing before it becomes a showstopper, though.

[zwass]

@mitchellh this repo should really be "archived" if there is not going to be an upgrade to notarytool.

[mitchellh]

@mitchellh this repo should really be "archived" if there is not going to be an upgrade to notarytool.

Agreed, the repository is now archived, updated the README with a notice.

Prior to archiving, I tried to merge the obviously correct PRs to keep the project in a working state for anyone who needs a transition period.