chore(deps): update build-emacs-for-macos to 0.6.61

Allow the default builder_ref to be set in the a single location, the
_prepare shared workflow. Other workflows essentially have a override
option, and no longer need explicit default values set.

.github/workflows/_build.yml

@@ -1,279 +1,151 @@
 ---
-# Requires _prepare.yml re-usable workflow to have run.
 name: _build
 on:
   workflow_call:
     inputs:
-      artifact_prefix:
-        description: Artifact prefix
-        type: string
-        required: false
-      os:
-        description: GitHub Actions runner OS
-        type: string
-        required: false
-        default: "macos-12"
-      build_os:
-        description: Target OS to build for
-        type: string
-        required: false
-        default: "macos-12"
       git_ref:
-        description: Git ref to build
+        description: Emacs git ref to build
-        type: string
         required: true
+        type: string
       git_sha:
-        description: Override git SHA to build
+        description: Override Emacs git commit SHA to build
-        type: string
         required: false
-      build_args:
+        type: string
+      builder_ref:
+        description: "Git ref to checkout of build-emacs-for-macos"
+        required: false
+        type: string
+      builder_args:
         description: Custom arguments passed to build script
-        type: string
         required: false
+        default: ""
+        type: string
+      build_variant:
+        description: "Optional build number used as version suffix"
+        required: false
+        type: string
       test_build_name:
         description: "Test build name"
-        type: string
         required: false
+        default: ""
+        type: string
       test_release_type:
         description: "prerelease or draft"
-        type: string
         required: false
-        default: "prerelease"
+        default: ""
-    secrets:
+        type: string
-      APPLE_DEVELOPER_CERTIFICATE_P12_BASE64:
+      x86_64:
-        description: Base64 encoded Apple Developer Certificate
+        description: "Build x86_64 version of Emacs"
-        required: true
+        required: false
-      APPLE_DEVELOPER_CERTIFICATE_PASSWORD:
+        default: true
-        description: Password for Apple Developer Certificate
+        type: boolean
-        required: true
+      arm64:
-      KEYCHAIN_PASSWORD:
+        description: "Build arm64 version of Emacs"
-        description: Password to use for temporary local keychain on runner
+        required: false
-        required: true
+        default: true
-      AC_USERNAME:
+        type: boolean
-        description: Apple Connect Username
-        required: true
-      AC_PASSWORD:
-        description: Apple Connect Password
-        required: true
-      AC_PROVIDER:
-        description: Apple Connect Provider
-        required: true
-      AC_SIGN_IDENTITY:
-        description: Apple Connect Signing Identify
-        required: true
-      TAP_REPO_TOKEN:
-        description: Homebrew Tap Token
-        required: true
-    outputs:
-      package_created:
-        description: "Whether or not a package was created"
-        value: ${{ jobs.package.result == 'success' }}
 
 jobs:
   prepare:
-    runs-on: ${{ inputs.os }}
+    name: Prepare
-    outputs:
+    uses: ./.github/workflows/_prepare.yml
-      builder_sha: ${{ steps.builder_sha.outputs.sha }}
+    with:
-      emacs_sha_override: ${{ steps.emacs_sha.outputs.sha }}
+      builder_ref: ${{ inputs.builder_ref }}
-      test_plan_args: ${{ steps.test_plan_args.outputs.args }}
+
-    steps:
+  # ----------------------------------------------------------------------------
-      - name: Download emacs-builder git SHA artifact
+  # Build x86_64 version of Emacs
-        uses: actions/download-artifact@v3
+  # ----------------------------------------------------------------------------
-        with:
+
-          name: emacs-builder-git-sha
+  build_x86_64:
-          path: ./
+    name: Build (x86_64)
-      - name: Store builder Git SHA
+    if: inputs.x86_64
-        id: builder_sha
+    uses: ./.github/workflows/_build_emacs.yml
-        run: >-
-          echo "sha=$(cat emacs-builder-git-sha.txt)" >> $GITHUB_OUTPUT
-      - name: Prepare plan test args
-        id: test_plan_args
-        if: ${{ inputs.test_build_name != '' }}
-        run: >-
-          echo "args=--test-build '${{ inputs.test_build_name }}' --test-release-type '${{ inputs.test_release_type }}'" >> $GITHUB_OUTPUT
-      - name: Set git SHA override
-        id: emacs_sha
-        if: ${{ inputs.git_sha != '' }}
-        run: >-
-          echo "sha=--sha '${{ inputs.git_sha }}'" >> $GITHUB_OUTPUT
-  plan:
     needs: [prepare]
-    runs-on: ${{ inputs.build_os }}
+    with:
-    outputs:
+      builder_ref: ${{ needs.prepare.outputs.builder_sha }}
-      check: ${{ steps.check.outputs.result }}
+      os: "macos-13"
-    steps:
+      build_os: "macos-13" # Only macos-13 and earlier are x86_64.
-      - name: Checkout build-emacs-for-macos repo
+      artifact_prefix: "x86_64-"
-        if: ${{ inputs.os != inputs.build_os }}
+      git_ref: ${{ inputs.git_ref }}
-        uses: actions/checkout@v4
+      git_sha: ${{ inputs.git_sha }}
-        with:
+      build_args: ${{ inputs.builder_args }}
-          repository: jimeh/build-emacs-for-macos
+      build_variant: ${{ inputs.build_variant }}
-          ref: ${{ needs.prepare.outputs.builder_sha }}
+      test_build_name: ${{ inputs.test_build_name }}
-      - uses: actions/setup-go@v4
+      test_release_type: ${{ inputs.test_release_type }}
-        if: ${{ inputs.os != inputs.build_os }}
+    secrets: inherit
-        with:
-          go-version: "1.21"
-      - name: Build emacs-builder tool
-        if: ${{ inputs.os != inputs.build_os }}
-        run: make build
-      - name: Download pre-built emacs-builder artifact
-        if: ${{ inputs.os == inputs.build_os }}
-        uses: actions/download-artifact@v3
-        with:
-          name: emacs-builder
-          path: bin
-      - name: Ensure emacs-builder is executable
-        if: ${{ inputs.os == inputs.build_os }}
-        run: chmod +x bin/emacs-builder
-      - name: Plan build
-        run: >-
-          bin/emacs-builder -l debug plan --output build-plan.yml
-          --output-dir '${{ github.workspace }}/builds'
-          ${{ needs.prepare.outputs.test_plan_args }}
-          ${{ needs.prepare.outputs.emacs_sha_override }}
-          '${{ inputs.git_ref }}'
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Show plan
-        run: cat build-plan.yml
-      - name: Upload build-plan artifact
-        uses: actions/upload-artifact@v3
-        with:
-          name: ${{ inputs.artifact_prefix }}build-plan
-          path: build-plan.yml
-          if-no-files-found: error
-      - name: Check if planned release and asset already exist
-        id: check
-        continue-on-error: true
-        run: |
-          echo "result=$((bin/emacs-builder -l debug release --plan build-plan.yml check && echo 'ok') || echo 'fail')" >> $GITHUB_OUTPUT
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - run: echo 'Planned release already seems to exist.'
-        if: ${{ steps.check.outputs.result == 'ok' }}
 
-  build:
+  release_x86_64:
-    runs-on: ${{ inputs.build_os }}
+    name: Release (x86_64)
-    needs: [prepare, plan]
+    uses: ./.github/workflows/_release.yml
-    # Only run if check for existing release and asset failed.
+    # Depend on both build_x86_64 and build_arm64, but only run if build_x86_64
-    if: ${{ needs.plan.outputs.check == 'fail' }}
+    # was successful and a package was created. This ensure wait for all builds
-    steps:
+    # to complete before running any release jobs.
-      - name: Checkout build-emacs-for-macos repo
+    needs: [prepare, build_x86_64, build_arm64]
-        uses: actions/checkout@v4
+    if: |
-        with:
+      always() &&
-          repository: jimeh/build-emacs-for-macos
+      needs.build_x86_64.result == 'success' &&
-          ref: ${{ needs.prepare.outputs.builder_sha }}
+      needs.build_x86_64.outputs.package_created &&
-          path: builder
+      needs.build_arm64.result != 'failure'
-      - uses: ruby/setup-ruby@v1
+    with:
-        with:
+      builder_ref: ${{ needs.prepare.outputs.builder_sha }}
-          ruby-version: "3.2"
+      os: "macos-13" # Only macos-13 and earlier are x86_64.
-      - name: Update homebrew
+      plan_artifact: x86_64-build-plan
-        run: brew update
+      dmg_artifact: x86_64-dmg
-      - name: Fix system python breaking homebrew
-        run: >-
-          find "$(brew --prefix)/bin" -type l
-          -ilname '*/Library/Frameworks/Python.framework/*'
-          -delete
-      - name: Install dependencies
-        run: make bootstrap
-        working-directory: builder
-      - name: Download build-plan artifact
-        uses: actions/download-artifact@v3
-        with:
-          name: ${{ inputs.artifact_prefix }}build-plan
-          path: ./
-      - name: Build Emacs
-        run: >-
-          ./builder/build-emacs-for-macos
-          --log-level debug
-          --plan build-plan.yml
-          --native-full-aot
-          --no-self-sign
-          ${{ inputs.build_args }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Upload unsigned app artifact
-        uses: actions/upload-artifact@v3
-        with:
-          name: ${{ inputs.artifact_prefix }}unsigned-app
-          path: builds/*.tbz
-          if-no-files-found: error
-      - name: Upload Emacs source artifact
-        uses: actions/upload-artifact@v3
-        with:
-          name: ${{ inputs.artifact_prefix }}emacs-source
-          path: builder/tarballs/*.tgz
 
-  package:
+  # ----------------------------------------------------------------------------
-    runs-on: ${{ inputs.os }}
+  # Build arm64 version of Emacs
-    needs: [prepare, plan, build]
+  # ----------------------------------------------------------------------------
-    steps:
-      - uses: actions/setup-python@v4
-        with:
-          python-version: "3.11"
-      - name: Install dmgbuild
-        run: |
-          $(command -v pip3 || command -v pip) install --upgrade dmgbuild
-      - name: Download pre-built emacs-builder artifact
-        uses: actions/download-artifact@v3
-        with:
-          name: emacs-builder
-          path: bin
-      - name: Ensure emacs-builder is executable
-        run: chmod +x bin/emacs-builder
-      - name: Download build-plan artifact
-        uses: actions/download-artifact@v3
-        with:
-          name: ${{ inputs.artifact_prefix }}build-plan
-          path: ./
-      - name: Download unsigned app artifact
-        uses: actions/download-artifact@v3
-        with:
-          name: ${{ inputs.artifact_prefix }}unsigned-app
-          path: builds
-      - name: Extract unsigned app archive
-        run: |
-          find * -name '*.tbz' -exec tar xvjf "{}" \;
-        working-directory: builds
-      - name: Install the Apple signing certificate
-        run: |
-          # create variables
-          CERTIFICATE_PATH="$RUNNER_TEMP/build_certificate.p12"
-          KEYCHAIN_PATH="$RUNNER_TEMP/app-signing.keychain-db"
 
-          # import certificate and provisioning profile from secrets
+  build_arm64:
-          echo -n "$CERT_BASE64" | base64 --decode --output "$CERTIFICATE_PATH"
+    name: Build (arm64)
+    if: inputs.arm64
+    uses: ./.github/workflows/_build_emacs.yml
+    needs: [prepare]
+    with:
+      builder_ref: ${{ needs.prepare.outputs.builder_sha }}
+      os: "macos-14"
+      build_os: "macos-14" # Only macos-14 and later are ARM64.
+      artifact_prefix: "arm64-"
+      git_ref: ${{ inputs.git_ref }}
+      git_sha: ${{ inputs.git_sha }}
+      build_args: ${{ inputs.builder_args }}
+      build_variant: ${{ inputs.build_variant }}
+      test_build_name: ${{ inputs.test_build_name }}
+      test_release_type: ${{ inputs.test_release_type }}
+    secrets: inherit
 
-          # create temporary keychain
+  release_arm64:
-          security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+    name: Release (arm64)
-          security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
+    uses: ./.github/workflows/_release.yml
-          security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+    # Depend on both build_arm64 and build_x86_64, but only run if build_arm64
+    # was successful and a package was created. This ensure wait for all builds
+    # to complete before running any release jobs.
+    needs: [prepare, build_arm64, build_x86_64]
+    if: |
+      always() &&
+      needs.build_arm64.result == 'success' &&
+      needs.build_arm64.outputs.package_created &&
+      needs.build_x86_64.result != 'failure'
+    with:
+      builder_ref: ${{ needs.prepare.outputs.builder_sha }}
+      os: "macos-14" # Only macos-14 and later are ARM64.
+      plan_artifact: arm64-build-plan
+      dmg_artifact: arm64-dmg
 
-          # import certificate to keychain
+  # ----------------------------------------------------------------------------
-          security import "$CERTIFICATE_PATH" -P "$CERT_PASSWORD" -A \
+  # Trigger update casks workflow in homebrew tap
-            -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
+  # ----------------------------------------------------------------------------
-          security list-keychain -d user -s "$KEYCHAIN_PATH"
+
-        env:
+  update_casks:
-          CERT_BASE64: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }}
+    name: Update Casks
-          CERT_PASSWORD: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }}
+    uses: ./.github/workflows/_update-casks.yml
-          KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
+    # Depend on both release jobs, but only run if either of them was
-      - name: Sign, package and notarize build
+    # successful. This ensures we only run this job once all release jobs have
-        run: >-
+    # been completed.
-          bin/emacs-builder -l debug package -v --plan build-plan.yml
+    needs: [release_x86_64, release_arm64]
-          --sign --remove-source-dir
+    if: >-
-        env:
+      always() &&
-          AC_USERNAME: ${{ secrets.AC_USERNAME }}
+      inputs.test_build_name == '' &&
-          AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
+      contains(needs.*.result, 'success') &&
-          AC_PROVIDER: ${{ secrets.AC_PROVIDER }}
+      !contains(needs.*.result, 'failure')
-          AC_SIGN_IDENTITY: ${{ secrets.AC_SIGN_IDENTITY }}
+    secrets: inherit
-      - name: Upload disk image artifacts
-        uses: actions/upload-artifact@v3
-        with:
-          name: ${{ inputs.artifact_prefix }}dmg
-          path: |
-            builds/*.dmg
-            builds/*.sha*
-          if-no-files-found: error
-      - name: Clean up keychain used for signing certificate
-        if: ${{ always() }}
-        run: |
-          security delete-keychain "$RUNNER_TEMP/app-signing.keychain-db"

.github/workflows/_build_emacs.yml

@@ -0,0 +1,250 @@
+---
+# Requires _prepare.yml re-usable workflow to have run.
+name: _build_emacs
+on:
+  workflow_call:
+    inputs:
+      builder_ref:
+        description: Git ref of build-emacs-for-macos to use
+        type: string
+        required: true
+      os:
+        description: GitHub Actions runner OS
+        type: string
+        required: false
+        default: "macos-13"
+      build_os:
+        description: Target OS to build for
+        type: string
+        required: false
+        default: "macos-13"
+      artifact_prefix:
+        description: Artifact prefix for build_os
+        type: string
+        required: false
+      git_ref:
+        description: Git ref to build
+        type: string
+        required: true
+      git_sha:
+        description: Override git SHA to build
+        type: string
+        required: false
+      build_args:
+        description: Custom arguments passed to build script
+        type: string
+        required: false
+      build_variant:
+        description: "Optional build number used as version suffix"
+        type: string
+        required: false
+      test_build_name:
+        description: "Test build name"
+        type: string
+        required: false
+      test_release_type:
+        description: "prerelease or draft"
+        type: string
+        required: false
+        default: "prerelease"
+    outputs:
+      package_created:
+        description: "Whether or not a package was created"
+        value: ${{ jobs.package.result == 'success' }}
+
+jobs:
+  plan:
+    runs-on: ${{ inputs.build_os }}
+    outputs:
+      check: ${{ steps.check.outputs.result }}
+    steps:
+      - name: Checkout build-emacs-for-macos repo
+        uses: actions/checkout@v4
+        with:
+          repository: jimeh/build-emacs-for-macos
+          ref: ${{ inputs.builder_ref }}
+      - name: Download pre-built emacs-builder artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: emacs-builder-${{ runner.arch }}
+          path: bin
+      - name: Ensure emacs-builder is executable
+        run: chmod +x bin/emacs-builder
+      - uses: nixbuild/nix-quick-install-action@v32
+      - uses: nix-community/cache-nix-action@v6
+        with:
+          primary-key: nix-${{ runner.arch }}-${{ hashFiles('**/flake.*') }}
+      - name: Install dependencies
+        run: nix develop --command nix flake metadata
+      - name: Prepare plan test args
+        id: test_plan_args
+        if: inputs.test_build_name != ''
+        run: >-
+          echo "args=--test-build '${{ inputs.test_build_name }}' --test-release-type '${{ inputs.test_release_type }}'" >> "$GITHUB_OUTPUT"
+      - name: Prepare build variant args
+        id: build_variant_args
+        if: inputs.build_variant != ''
+        run: >-
+          echo "args=--build-variant ${{ inputs.build_variant }}" >> "$GITHUB_OUTPUT"
+      - name: Set git SHA override
+        id: emacs_sha
+        if: inputs.git_sha != ''
+        run: >-
+          echo "sha=--sha '${{ inputs.git_sha }}'" >> "$GITHUB_OUTPUT"
+      - name: Plan build
+        run: >-
+          nix develop --command
+          bin/emacs-builder -l debug plan --output build-plan.yml
+          --output-dir '${{ github.workspace }}/builds'
+          ${{ steps.build_variant_args.outputs.args }}
+          ${{ steps.test_plan_args.outputs.args }}
+          ${{ steps.emacs_sha.outputs.sha }}
+          '${{ inputs.git_ref }}'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Show plan
+        run: cat build-plan.yml
+      - name: Upload build-plan artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ inputs.artifact_prefix }}build-plan
+          path: build-plan.yml
+          if-no-files-found: error
+      - name: Check if planned release and asset already exist
+        id: check
+        continue-on-error: true
+        run: |
+          echo "result=$((bin/emacs-builder -l debug release --plan build-plan.yml check && echo 'ok') || echo 'fail')" >> "$GITHUB_OUTPUT"
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - run: echo 'Planned release already seems to exist.'
+        if: steps.check.outputs.result == 'ok'
+
+  build:
+    runs-on: ${{ inputs.build_os }}
+    needs: [plan]
+    # Only run if check for existing release and asset failed.
+    if: needs.plan.outputs.check == 'fail'
+    steps:
+      - name: Checkout build-emacs-for-macos repo
+        uses: actions/checkout@v4
+        with:
+          repository: jimeh/build-emacs-for-macos
+          ref: ${{ inputs.builder_ref }}
+          path: builder
+      - uses: nixbuild/nix-quick-install-action@v32
+      - uses: nix-community/cache-nix-action@v6
+        with:
+          primary-key: nix-${{ runner.arch }}-${{ hashFiles('**/flake.*') }}
+      - name: Download build-plan artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: ${{ inputs.artifact_prefix }}build-plan
+          path: ./builder/
+      - name: Install dependencies
+        run: nix develop --command nix flake metadata
+        working-directory: builder
+      - name: Install Ruby dependencies
+        run: >-
+          nix develop --command make bootstrap-ruby
+        working-directory: builder
+        env:
+          BUNDLE_WITHOUT: "development"
+      - name: Build Emacs
+        run: >-
+          nix develop
+          --command ./build-emacs-for-macos
+          --log-level debug
+          --plan build-plan.yml
+          --native-full-aot
+          --no-self-sign
+          ${{ inputs.build_args }}
+        working-directory: builder
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Upload unsigned app artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ inputs.artifact_prefix }}unsigned-app
+          path: builds/*.tbz
+          if-no-files-found: error
+      - name: Upload Emacs source artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ inputs.artifact_prefix }}emacs-source
+          path: builder/tarballs/*.tgz
+
+  package:
+    runs-on: ${{ inputs.os }}
+    needs: [plan, build]
+    steps:
+      - name: Download pre-built emacs-builder artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: emacs-builder-${{ runner.arch }}
+          path: bin
+      - name: Ensure emacs-builder is executable
+        run: chmod +x bin/emacs-builder
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - name: Install dmgbuild
+        run: |
+          $(command -v pip3 || command -v pip) install --upgrade dmgbuild
+      - name: Download build-plan artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: ${{ inputs.artifact_prefix }}build-plan
+          path: ./
+      - name: Download unsigned app artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: ${{ inputs.artifact_prefix }}unsigned-app
+          path: builds
+      - name: Extract unsigned app archive
+        run: |
+          find * -name '*.tbz' -exec tar xvjf "{}" \;
+        working-directory: builds
+      - name: Install the Apple signing certificate
+        run: |
+          # create variables
+          CERTIFICATE_PATH="$RUNNER_TEMP/build_certificate.p12"
+          KEYCHAIN_PATH="$RUNNER_TEMP/app-signing.keychain-db"
+
+          # import certificate and provisioning profile from secrets
+          echo -n "$CERT_BASE64" | base64 --decode > "$CERTIFICATE_PATH"
+
+          # create temporary keychain
+          security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+          security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+
+          # import certificate to keychain
+          security import "$CERTIFICATE_PATH" -P "$CERT_PASSWORD" -A \
+            -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
+          security list-keychain -d user -s "$KEYCHAIN_PATH"
+        env:
+          CERT_BASE64: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }}
+          CERT_PASSWORD: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }}
+          KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
+      - name: Sign, package and notarize build
+        run: >-
+          bin/emacs-builder package -v --plan build-plan.yml
+          --sign --remove-source-dir
+        env:
+          AC_USERNAME: ${{ secrets.AC_USERNAME }}
+          AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
+          AC_PROVIDER: ${{ secrets.AC_PROVIDER }}
+          AC_SIGN_IDENTITY: ${{ secrets.AC_SIGN_IDENTITY }}
+      - name: Upload disk image artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ inputs.artifact_prefix }}dmg
+          path: |
+            builds/*.dmg
+            builds/*.sha*
+          if-no-files-found: error
+      - name: Clean up keychain used for signing certificate
+        if: always()
+        run: |
+          security delete-keychain "$RUNNER_TEMP/app-signing.keychain-db"

.github/workflows/_prepare.yml

@@ -3,47 +3,89 @@ name: _prepare
 on:
   workflow_call:
     inputs:
-      os:
-        description: GitHub Actions runner OS
-        type: string
-        required: false
-        default: "macos-12"
       builder_ref:
         description: Git ref to checkout of build-emacs-for-macos
         required: false
         type: string
-        default: "v0.6.45"
+        default: ""
-    secrets:
+    outputs:
-      TAP_REPO_TOKEN:
+      builder_ref:
-        description: Personal Access Token for Homebrew Tap repo
+        description: Git ref of build-emacs-for-macos at builder_ref
-        required: true
+        value: ${{ jobs.builder-sha.outputs.ref }}
+      builder_sha:
+        description: Git commit SHA of build-emacs-for-macos at builder_ref
+        value: ${{ jobs.builder-sha.outputs.sha }}
 
 jobs:
-  emacs-builder:
+  builder-sha:
-    runs-on: ${{ inputs.os }}
+    runs-on: "macos-13"
+    outputs:
+      ref: ${{ steps.ref.outputs.ref }}
+      sha: ${{ steps.sha.outputs.sha }}
     steps:
+      - name: Default git ref check
+        id: ref
+        run: |
+          DEFAULT_BUILDER_REF="v0.6.61"
+          BUILDER_REF="${{ inputs.builder_ref }}"
+          echo "ref=${BUILDER_REF:-$DEFAULT_BUILDER_REF}" >> "$GITHUB_OUTPUT"
       - name: Checkout build-emacs-for-macos repo
         uses: actions/checkout@v4
         with:
           repository: jimeh/build-emacs-for-macos
-          ref: ${{ inputs.builder_ref }}
+          ref: ${{ steps.ref.outputs.ref }}
       - name: Store builder Git SHA
+        id: sha
         run: |
-          git rev-parse HEAD > emacs-builder-git-sha.txt
+          BUILDER_SHA="$(git rev-parse HEAD)"
+          echo "$BUILDER_SHA" > build-emacs-for-macos-git-sha.txt
+          echo "sha=$BUILDER_SHA" >> "$GITHUB_OUTPUT"
+          echo "Builder ref ${{ inputs.builder_ref }} resolved to" \
+               "commit SHA: $BUILDER_SHA"
       - name: Upload builder git SHA artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
-          name: emacs-builder-git-sha
+          name: build-emacs-for-macos-git-sha
-          path: emacs-builder-git-sha.txt
+          path: build-emacs-for-macos-git-sha.txt
           if-no-files-found: error
-      - uses: actions/setup-go@v4
+
+  emacs-builder:
+    needs: [builder-sha]
+    strategy:
+      matrix:
+        os:
+          - macos-13 # Only macos-13 and earlier are x86_64.
+          - macos-14 # Only macos-14 and later are ARM64.
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Cache emacs-builder (${{ runner.arch }})
+        id: cache
+        uses: actions/cache@v4
         with:
-          go-version: "1.21"
+          path: bin/emacs-builder
+          key: emacs-builder-${{ runner.arch }}-${{ needs.builder-sha.outputs.sha }}-bin
+      - name: Checkout build-emacs-for-macos repo
+        if: steps.cache.outputs.cache-hit != 'true'
+        uses: actions/checkout@v4
+        with:
+          repository: jimeh/build-emacs-for-macos
+          ref: ${{ needs.builder-sha.outputs.ref }}
+          fetch-depth: 0
+      - name: Setup Go
+        if: steps.cache.outputs.cache-hit != 'true'
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.23"
       - name: Build emacs-builder tool
+        if: steps.cache.outputs.cache-hit != 'true'
         run: make build
+      - name: Ensure emacs-builder is executable
+        if: steps.cache.outputs.cache-hit != 'true'
+        run: chmod +x bin/emacs-builder
+      - run: bin/emacs-builder --version
       - name: Upload emacs-builder artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
-          name: emacs-builder
+          name: emacs-builder-${{ runner.arch }}
           path: bin/emacs-builder
           if-no-files-found: error

.github/workflows/_release.yml

@@ -1,14 +1,21 @@
 ---
 # Requires _prepare.yml and _build.yml re-usable workflows to have run.
 name: _release
+concurrency:
+  group: _release
+  cancel-in-progress: false
 on:
   workflow_call:
     inputs:
+      builder_ref:
+        description: Git ref of build-emacs-for-macos to use
+        type: string
+        required: true
       os:
         description: GitHub Actions runner OS
         type: string
         required: false
-        default: "macos-12"
+        default: "macos-13"
       plan_artifact:
         description: Name of artifact containing a emacs-builder plan yaml file
         type: string
@@ -17,58 +24,36 @@ on:
         description: Name of artifact containing a *.dmg files to release
         type: string
         required: true
-      test_build_name:
-        description: "Test build name"
-        type: string
-        required: false
-      update_casks:
-        description: "Update casks in homebrew tap?"
-        type: boolean
-        required: true
-        default: true
-    secrets:
-      TAP_REPO_TOKEN:
-        description: Personal Access Token for Homebrew Tap repo
-        required: true
 
 jobs:
   github:
     runs-on: ${{ inputs.os }}
     steps:
       - name: Download pre-built emacs-builder artifact
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
-          name: emacs-builder
+          name: emacs-builder-${{ runner.arch }}
           path: bin
       - name: Ensure emacs-builder is executable
         run: chmod +x bin/emacs-builder
       - name: Download build-plan.yml artifact
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: ${{ inputs.plan_artifact }}
           path: ./
       - name: Download disk image artifacts
         id: dmg
         continue-on-error: true
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: ${{ inputs.dmg_artifact }}
           path: builds
       - name: Publish disk images to a GitHub Release
-        if: ${{ steps.dmg.outputs.result != 'fail' }}
+        if: steps.dmg.outcome != 'failure'
         run: >-
           bin/emacs-builder -l debug release --plan build-plan.yml publish
           $(find builds -name '*.dmg' -or -name '*.sha256')
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Trigger update casks workflow in homebrew tap
-        if: >-
-          steps.dmg.outputs.result != 'fail' &&
-          inputs.test_build_name == '' &&
-          inputs.update_casks
-        run: >-
-          gh workflow run --repo jimeh/homebrew-emacs-builds update-casks.yml
-        env:
-          GITHUB_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}
       - run: echo 'No DMG artifact available, was there a new commit to build?'
-        if: ${{ steps.dmg.outputs.result == 'fail' }}
+        if: steps.dmg.outcome == 'failure'

.github/workflows/_update-casks.yml

@@ -0,0 +1,23 @@
+---
+name: _update-casks
+concurrency:
+  group: _update-casks
+  cancel-in-progress: false
+on:
+  workflow_call:
+    inputs:
+      os:
+        description: GitHub Actions runner OS
+        type: string
+        required: false
+        default: "ubuntu-latest"
+
+jobs:
+  emacs-builds:
+    runs-on: ${{ inputs.os }}
+    steps:
+      - name: Trigger update casks workflow in homebrew tap
+        run: >-
+          gh workflow run --repo jimeh/homebrew-emacs-builds update-casks.yml
+        env:
+          GITHUB_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}

.github/workflows/build.yml

@@ -11,17 +11,13 @@ on:
         description: Override Emacs git commit SHA to build
         required: false
       builder_ref:
-        description: "Git ref to checkout of build-emacs-for-macos"
+        description: "Override git ref to checkout of build-emacs-for-macos"
-        required: true
+        required: false
-        default: "master"
+        default: ""
       builder_args:
         description: Custom arguments passed to build script
         required: false
         default: ""
-      os:
-        description: 'Runner OS ("macos-12", "macos-13", or "macos-latest")'
-        required: true
-        default: "macos-12"
       test_build_name:
         description: "Test build name"
         required: false
@@ -30,6 +26,10 @@ on:
         description: "prerelease or draft"
         required: false
         default: ""
+      build_variant:
+        description: "Optional build number used as version suffix"
+        required: false
+        type: string
       x86_64:
         description: "Build x86_64 version of Emacs"
         required: false
@@ -38,99 +38,21 @@ on:
       arm64:
         description: "Build arm64 version of Emacs"
         required: false
-        default: false
+        default: true
         type: boolean
 
 jobs:
-  prepare:
+  build:
-    name: Prepare
+    name: Build
-    uses: ./.github/workflows/_prepare.yml
-    with:
-      os: ${{ github.event.inputs.os }}
-      builder_ref: ${{ github.event.inputs.builder_ref }}
-    secrets:
-      TAP_REPO_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}
-
-  # ----------------------------------------------------------------------------
-  # Build x86_64 version of Emacs
-  # ----------------------------------------------------------------------------
-
-  build_x86_64:
-    name: Build (x86_64)
-    if: ${{ github.event.inputs.x86_64 == 'true' }}
     uses: ./.github/workflows/_build.yml
-    needs: [prepare]
     with:
-      os: ${{ github.event.inputs.os }}
+      git_ref: ${{ inputs.git_ref }}
-      build_os: "macos-12"
+      git_sha: ${{ inputs.git_sha }}
-      artifact_prefix: "x86_64-"
+      builder_ref: ${{ inputs.builder_ref }}
-      git_ref: ${{ github.event.inputs.git_ref }}
+      builder_args: ${{ inputs.builder_args }}
-      git_sha: ${{ github.event.inputs.git_sha }}
+      build_variant: ${{ inputs.build_variant }}
-      build_args: ${{ github.event.inputs.builder_args }}
+      test_build_name: ${{ inputs.test_build_name }}
-      test_build_name: ${{ github.event.inputs.test_build_name }}
+      test_release_type: ${{ inputs.test_release_type }}
-      test_release_type: ${{ github.event.inputs.test_release_type }}
+      x86_64: ${{ inputs.x86_64 }}
-    secrets:
+      arm64: ${{ inputs.arm64 }}
-      APPLE_DEVELOPER_CERTIFICATE_P12_BASE64: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }}
+    secrets: inherit
-      APPLE_DEVELOPER_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }}
-      KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
-      AC_USERNAME: ${{ secrets.AC_USERNAME }}
-      AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
-      AC_PROVIDER: ${{ secrets.AC_PROVIDER }}
-      AC_SIGN_IDENTITY: ${{ secrets.AC_SIGN_IDENTITY }}
-      TAP_REPO_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}
-
-  release_x86_64:
-    name: Release (x86_64)
-    uses: ./.github/workflows/_release.yml
-    needs: [build_x86_64]
-    if: ${{ needs.build_x86_64.outputs.package_created }}
-    with:
-      os: ${{ github.event.inputs.os }}
-      plan_artifact: x86_64-build-plan
-      dmg_artifact: x86_64-dmg
-      test_build_name: ${{ github.event.inputs.test_build_name }}
-      update_casks: true
-    secrets:
-      TAP_REPO_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}
-
-  # ----------------------------------------------------------------------------
-  # Build arm64 version of Emacs
-  # ----------------------------------------------------------------------------
-
-  build_arm64:
-    name: Build (arm64)
-    if: ${{ github.event.inputs.arm64 == 'true' }}
-    uses: ./.github/workflows/_build.yml
-    needs: [prepare]
-    with:
-      os: ${{ github.event.inputs.os }}
-      build_os: "macos-13-xlarge" # Only macos-13-xlarge has arm64 support.
-      artifact_prefix: "arm64-"
-      git_ref: ${{ github.event.inputs.git_ref }}
-      git_sha: ${{ github.event.inputs.git_sha }}
-      build_args: ${{ github.event.inputs.builder_args }}
-      test_build_name: ${{ github.event.inputs.test_build_name }}
-      test_release_type: ${{ github.event.inputs.test_release_type }}
-    secrets:
-      APPLE_DEVELOPER_CERTIFICATE_P12_BASE64: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }}
-      APPLE_DEVELOPER_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }}
-      KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
-      AC_USERNAME: ${{ secrets.AC_USERNAME }}
-      AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
-      AC_PROVIDER: ${{ secrets.AC_PROVIDER }}
-      AC_SIGN_IDENTITY: ${{ secrets.AC_SIGN_IDENTITY }}
-      TAP_REPO_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}
-
-  release_arm64:
-    name: Release (arm64)
-    uses: ./.github/workflows/_release.yml
-    needs: [build_arm64]
-    if: ${{ needs.build_arm64.outputs.package_created }}
-    with:
-      os: ${{ github.event.inputs.os }}
-      plan_artifact: arm64-build-plan
-      dmg_artifact: arm64-dmg
-      test_build_name: ${{ github.event.inputs.test_build_name }}
-      update_casks: false
-    secrets:
-      TAP_REPO_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}

.github/workflows/nightly-master.yml

@@ -2,93 +2,18 @@
 name: Nightly (master)
 on:
   schedule:
-    - cron: "0 23 1 * *"
+    - cron: "0 23 * * *"
-    - cron: "0 23 2-31 * *"
   workflow_dispatch:
     inputs:
       git_sha:
         description: Override Emacs git commit SHA to build
         required: false
-      arm64:
-        description: "Build arm64 version of Emacs?"
-        required: false
-        default: false
-        type: boolean
 
 jobs:
-  prepare:
+  build:
-    name: Prepare
+    name: Build
-    uses: ./.github/workflows/_prepare.yml
-    secrets:
-      TAP_REPO_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}
-
-  # ----------------------------------------------------------------------------
-  # Build x86_64 version of Emacs
-  # ----------------------------------------------------------------------------
-
-  build_x86_64:
-    name: Build (x86_64)
     uses: ./.github/workflows/_build.yml
-    needs: [prepare]
     with:
-      build_os: "macos-12"
-      artifact_prefix: "x86_64-"
       git_ref: "master"
-      git_sha: ${{ github.event.inputs.git_sha }}
+      git_sha: ${{ inputs.git_sha }}
-    secrets:
+    secrets: inherit
-      APPLE_DEVELOPER_CERTIFICATE_P12_BASE64: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }}
-      APPLE_DEVELOPER_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }}
-      KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
-      AC_USERNAME: ${{ secrets.AC_USERNAME }}
-      AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
-      AC_PROVIDER: ${{ secrets.AC_PROVIDER }}
-      AC_SIGN_IDENTITY: ${{ secrets.AC_SIGN_IDENTITY }}
-      TAP_REPO_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}
-
-  release_x86_64:
-    name: Release (x86_64)
-    uses: ./.github/workflows/_release.yml
-    needs: [build_x86_64]
-    if: ${{ needs.build_x86_64.outputs.package_created }}
-    with:
-      plan_artifact: x86_64-build-plan
-      dmg_artifact: x86_64-dmg
-      update_casks: true
-    secrets:
-      TAP_REPO_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}
-
-  # ----------------------------------------------------------------------------
-  # Build arm64 version of Emacs
-  # ----------------------------------------------------------------------------
-
-  build_arm64:
-    name: Build (arm64)
-    if: github.event.inputs.arm64 || github.event.schedule == '0 23 1 * *'
-    uses: ./.github/workflows/_build.yml
-    needs: [prepare]
-    with:
-      build_os: "macos-13-xlarge" # Only macos-13-xlarge has arm64 support.
-      artifact_prefix: "arm64-"
-      git_ref: "master"
-      git_sha: ${{ github.event.inputs.git_sha }}
-    secrets:
-      APPLE_DEVELOPER_CERTIFICATE_P12_BASE64: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }}
-      APPLE_DEVELOPER_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }}
-      KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
-      AC_USERNAME: ${{ secrets.AC_USERNAME }}
-      AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
-      AC_PROVIDER: ${{ secrets.AC_PROVIDER }}
-      AC_SIGN_IDENTITY: ${{ secrets.AC_SIGN_IDENTITY }}
-      TAP_REPO_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}
-
-  release_arm64:
-    name: Release (arm64)
-    uses: ./.github/workflows/_release.yml
-    needs: [build_arm64]
-    if: ${{ needs.build_arm64.outputs.package_created }}
-    with:
-      plan_artifact: arm64-build-plan
-      dmg_artifact: arm64-dmg
-      update_casks: false
-    secrets:
-      TAP_REPO_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}

.github/workflows/update-metadata.yml

@@ -11,12 +11,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout meta branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: meta
-      - uses: actions/setup-go@v4
+      - uses: actions/setup-go@v5
         with:
-          go-version: "1.21"
+          go-version: "1.23"
       - name: update total downloads shield JSON
         run: >-
           go run . badges downloads
@@ -25,7 +25,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ github.token }}
       - name: commit and push changes to meta branch
-        uses: stefanzweifel/git-auto-commit-action@v4
+        uses: stefanzweifel/git-auto-commit-action@v5
         with:
           commit_message: "chore(meta): update metadata files"
           commit_user_name: github-actions[bot]

README.md

@@ -26,12 +26,12 @@
 ## Features
 
 - Self-contained Emacs.app application bundle, with no external dependencies.
-- Native compilation ([gccemacs][]), only in Emacs 28.x and later builds.
+- Native compilation ([gccemacs][]).
-- Native JSON parsing via libjansson.
+- Native JSON parsing.
 - SVG rendering via librsvg.
 - Various image formats are supported via macOS native image APIs.
-- Xwidget-webkit support is enabled, allowing access to a embedded WebKit-based
+- Xwidget-webkit support, allowing access to a embedded WebKit-based browser
-  browser with `M-x xwidget-webkit-browse-url`.
+  with `M-x xwidget-webkit-browse-url`.
 - Native XML parsing via libxml2.
 - Dynamic module loading.
 - Includes the [fix-window-role][], [system-appearance][], and
@@ -56,11 +56,13 @@
 
 ## System Requirements
 
-- macOS 13 Ventura or later for Apple Silicon builds.
+- Builds produced after 2024-11-30:
-- macOS 12 Monterey or later for Intel builds, which can run on Apple Silicon
+  - macOS 11 or later.
-  via Rosetta2.
+- Builds produced before 2024-11-30:
+  - macOS 13 Ventura or later for Apple Silicon builds.
+  - macOS 12 Monterey or later for Intel builds.
 - Xcode Command Line Tools to use native compilation in Emacs, available since
-  28.x.
+  Emacs 28.x builds.
 
 ## Installation
 
@@ -80,59 +82,37 @@ for at least a day or two without any obvious issues.
 
 ### Homebrew Cask
 
-1. Install the
+The [`jimeh/emacs-builds`](https://github.com/jimeh/homebrew-emacs-builds)
-   [`jimeh/emacs-builds`](https://github.com/jimeh/homebrew-emacs-builds)
+Homebrew Tap provides the following casks:
-   Homebrew tap:
-   ```
-   brew tap jimeh/emacs-builds
-   ```
-2. Install one of the available casks:
-   - `emacs-app` — Latest stable release of Emacs.
-     ```
-     brew install --cask emacs-app
-     ```
-   - `emacs-app-pretest` — Latest pretest build of Emacs.
-     ```
-     brew install --cask emacs-app-pretest
-     ```
-   - `emacs-app-nightly` — Build of Emacs from the `master` branch, updated
-     every night.
-     ```
-     brew install --cask emacs-app-nightly
-     ```
-   - `emacs-app-monthly` — Build of Emacs from the `master` branch, updated on
-     the 1st of each month. These includes native Apple Silicon support.
-     ```
-     brew install --cask emacs-app-monthly
-     ```
-   - `emacs-app-good` for the latest known good nightly build listed on [#7][7]:
-     ```
-     brew install --cask emacs-app-good
-     ```
 
-[7]: https://github.com/jimeh/emacs-builds/issues/7
+- `jimeh/emacs-builds/emacs-app` — Latest stable release of Emacs.
+  ```bash
+  brew install --cask jimeh/emacs-builds/emacs-app
+  ```
+- `jimeh/emacs-builds/emacs-app-pretest` — Latest pretest build of Emacs.
+  ```bash
+  brew install --cask jimeh/emacs-builds/emacs-app-pretest
+  ```
+- `jimeh/emacs-builds/emacs-app-nightly` — Build of Emacs from the `master`
+  branch, updated every night.
+  ```bash
+  brew install --cask jimeh/emacs-builds/emacs-app-nightly
+  ```
+- `jimeh/emacs-builds/emacs-app-monthly` — Build of Emacs from the `master`
+  branch, updated on the 1st of each month.
+  ```bash
+  brew install --cask jimeh/emacs-builds/emacs-app-monthly
+  ```
+- `jimeh/emacs-builds/emacs-app-good` for the latest known good nightly build
+  listed on [#7][7]:
+  ```bash
+  brew install --cask jimeh/emacs-builds/emacs-app-good
+  ```
 
 ## Apple Silicon
 
-Native builds for Apple Silicon is supported, but currently GitHub's M1-based
+As of 2024-11-30, all builds include both Apple Silicon (arm64) and Intel
-Actions Runners are prohibitively expensive for nightly builds. Intel builds
+(x86_64) artifacts.
-though do work on Apple Silicon machines via Rosetta2, with a minor performance
-impact.
-
-Due to the costs, Apple Silicon builds are for now only scheduled for the 1st of
-each month. The `emacs-app-monthly` Homebrew Cask will always be pointing at a
-release that includes Intel and Apple Silicon builds.
-
-Builds for stable releases of Emacs will also include both Intel and Apple
-Silicon builds.
-
-### Costs
-
-At time of writing (2023-11-21), an average Apple Silicon build uses around 17
-minutes of billable time, at a cost of $0.16 USD per minute, that comes out to
-around $2.72 per build. I am considering enabling sponsorship on this repository
-in an effort to cover the costs for more frequent Apple Silicon builds, and will
-update here if/when I have any news.
 
 ## Use Emacs.app as `emacs` CLI Tool
 
@@ -173,13 +153,11 @@ use the alias from the above example.
 ## Build Process
 
 Building Emacs is done using the [jimeh/build-emacs-for-macos][] build script,
-executed within a GitHub Actions [workflow][]. This is why macOS 11.x (Big Sur)
+executed within a GitHub Actions [workflow][].
-or later is required, as it's the oldest version of macOS available in GitHub
-Actions.
 
 [jimeh/build-emacs-for-macos]: https://github.com/jimeh/build-emacs-for-macos
 [workflow]:
-  https://github.com/jimeh/emacs-builds/blob/main/.github/workflows/build.yml
+  https://github.com/jimeh/emacs-builds/blob/main/.github/workflows/nightly-master.yml
 
 Full history for all builds is available on GitHub Actions [here][actions].
 Build logs are only retained by GitHub for 90 days though.
@@ -209,8 +187,6 @@ All builds also come with a SHA256 checksum file, which itself can be double
 checked against the SHA256 checksum log output from the packaging step of the
 GitHub Actions workflow run which produced the build.
 
-[emacs-mirror/emacs]: https://github.com/emacs-mirror/emacs
-
 ## Issues / To-Do
 
 Please see [Issues][] for details of things to come, or to report issues.
@@ -219,6 +195,19 @@ Please see [Issues][] for details of things to come, or to report issues.
 
 ## News / Recent Changes
 
+### 2024-12-01 — Apple Silicon builds all the time, more stability via Nix
+
+GitHub's standard runner for macOS 14 and later runs on Apple Silicon, and are
+free to use for public repositories. As such we now use `runs-on: macos-13` for
+Intel builds, and `runs-on: macos-14` for Apple Silicon builds. And we do so on
+all builds, nightlies, pretests, and stable.
+
+Additionally, macOS 11 Big Sur is now the minimum required version again, for
+both Intel and Apple Silicon builds. This is due to switching from Homebrew to
+Nix for managing build-time dependencies. And it supports easily switching
+between different macOS SDK versions, meaning we can target an SDK that is older
+than the OS we are creating the builds on.
+
 ### 2023-11-22 — Apple Silicon builds, drop macOS 11 support
 
 Apple Silicon builds are now available, but limited to stable releases, and