docs(readme): update nightly badge to include pre-releases

feat(builds): add support for building stable Emacs releases
As of build-emacs-for-macos v0.6.8, the emacs-builder tool supports handling stable Emacs release differently, so we can easily separate them from the regular nightly builds.
2026-02-19 10:46:40 +00:00 · 2021-07-03 00:37:46 +01:00 · 2021-07-03 00:21:55 +01:00 · 2021-07-02 00:13:17 +01:00 · 2021-07-01 23:42:20 +01:00 · 2021-06-29 02:58:04 +01:00
15 changed files with 733 additions and 640 deletions
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -2,7 +2,7 @@
 name: Build
 on:
  schedule:
-    - cron: "30 0 * * *"
+    - cron: "0 0 * * *"
  workflow_dispatch:
    inputs:
      gitRef:
@@ -10,75 +10,196 @@ on:
        required: true
        default: "master"
      extraPlanArgs:
-        Description: "Extra plan args"
+        description: "Extra plan args"
+        required: false
+        default: ""
+      extraCheckArgs:
+        description: "Extra check args"
        required: false
        default: ""
      extraBuildArgs:
-        Description: "Extra build args"
+        description: "Extra build args"
+        required: false
+        default: ""
+      extraPackageArgs:
+        description: "Extra package args"
        required: false
        default: ""
      extraReleaseArgs:
-        Description: "Extra release args"
+        description: "Extra release args"
        required: false
        default: ""

 jobs:
-  build-and-publish:
+  plan:
    runs-on: macos-10.15
+    outputs:
+      check: "${{ steps.check.outcome }}"
    steps:
-      - name: Checkout emacs-builds repo
-        uses: actions/checkout@v2
-        with:
-          path: releaser
      - name: Checkout build-emacs-for-macos repo
        uses: actions/checkout@v2
        with:
          repository: jimeh/build-emacs-for-macos
-          ref: "0.4.11"
+          ref: "v0.6.8"
          path: builder
-      - uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: 2.7
      - uses: actions/setup-go@v2
        with:
          go-version: 1.16
-      - name: Compile github-release tool
-        run: >-
-          go build -o ./github-release ./cmd/github-release
-        working-directory: releaser
+      - uses: actions/cache@v2
+        id: builder-cache
+        with:
+          path: ~/go/pkg/mod
+          key: ${{ runner.os }}-go-${{ hashFiles('builder/**/go.sum') }}
+          restore-keys: ${{ runner.os }}-go-
+      - name: Pre-build emacs-builder tool
+        run: make build
+        working-directory: builder
      - name: Plan build
        run: >-
-          ./releaser/github-release --plan plan.yml plan
-          --work-dir '${{ github.workspace }}'
+          builder/bin/emacs-builder -l debug plan
+          --output build-plan.yml
+          --output-dir '${{ github.workspace }}/builds'
          ${{ github.event.inputs.extraPlanArgs }}
-          ${{ github.event.inputs.gitRef }}
+          '${{ github.event.inputs.gitRef }}'
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Show plan
-        run: >-
-          cat plan.yml
+        run: cat build-plan.yml
      - name: Check if planned release and asset already exist
        id: check
        continue-on-error: true
        run: >-
-          ./releaser/github-release --plan plan.yml check
+          builder/bin/emacs-builder -l debug release --plan build-plan.yml check
+          ${{ github.event.inputs.extraCheckArgs }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Upload pre-built emacs-builder artifact
+        uses: actions/upload-artifact@v2
+        with:
+          name: emacs-builder
+          path: builder/bin/emacs-builder
+          if-no-files-found: error
+      - name: Upload build-plan.yml artifact
+        uses: actions/upload-artifact@v2
+        with:
+          name: build-plan.yml
+          path: build-plan.yml
+          if-no-files-found: error
+
+  build:
+    runs-on: macos-10.15
+    needs: [plan]
+    # Only run if check for existing release and asset failed.
+    if: ${{ needs.plan.outputs.check == 'failure' }}
+    steps:
+      - name: Checkout build-emacs-for-macos repo
+        uses: actions/checkout@v2
+        with:
+          repository: jimeh/build-emacs-for-macos
+          ref: "v0.6.8"
+          path: builder
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: 2.7
      - name: Install dependencies
-        if: steps.check.outcome == 'failure'
-        run: >-
-          brew bundle --file=builder/Brewfile
+        run: make bootstrap-ci
+        working-directory: builder
+      - name: Download pre-built emacs-builder artifact
+        uses: actions/download-artifact@v2
+        id: builder
+        with:
+          name: emacs-builder
+          path: bin
+      - name: Ensure emacs-builder is executable
+        run: chmod +x bin/emacs-builder
+      - name: Download build-plan.yml artifact
+        uses: actions/download-artifact@v2
+        id: plan
+        with:
+          name: build-plan.yml
+          path: ./
      - name: Build Emacs
-        if: steps.check.outcome == 'failure'
        run: >-
-          ./builder/build-emacs-for-macos --plan=plan.yml
-          --work-dir '${{ github.workspace }}'
-          --native-full-aot
-          ${{ github.event.inputs.extraReleaseArgs }}
-      - name: Publish release
-        if: steps.check.outcome == 'failure'
+          ./builder/build-emacs-for-macos --plan build-plan.yml
+          --native-full-aot ${{ github.event.inputs.extraBuildArgs }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Install the Apple signing certificate
+        run: |
+          # create variables
+          CERTIFICATE_PATH="$RUNNER_TEMP/build_certificate.p12"
+          KEYCHAIN_PATH="$RUNNER_TEMP/app-signing.keychain-db"
+
+          # import certificate and provisioning profile from secrets
+          echo -n "$CERT_BASE64" | base64 --decode --output "$CERTIFICATE_PATH"
+
+          # create temporary keychain
+          security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+          security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+
+          # import certificate to keychain
+          security import "$CERTIFICATE_PATH" -P "$CERT_PASSWORD" -A \
+            -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
+          security list-keychain -d user -s "$KEYCHAIN_PATH"
+        env:
+          CERT_BASE64: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }}
+          CERT_PASSWORD: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }}
+          KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
+      - name: Sign, package and notarize build
        run: >-
-          ./releaser/github-release --plan plan.yml publish
+          bin/emacs-builder -l debug package -v --plan build-plan.yml
+          --sign --remove-source-dir
+          ${{ github.event.inputs.extraPackageArgs }}
+        env:
+          AC_USERNAME: ${{ secrets.AC_USERNAME }}
+          AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
+          AC_PROVIDER: ${{ secrets.AC_PROVIDER }}
+          AC_SIGN_IDENTITY: ${{ secrets.AC_SIGN_IDENTITY }}
+      - name: Upload disk image artifacts
+        uses: actions/upload-artifact@v2
+        with:
+          name: dmg
+          path: |
+            builds/*.dmg
+            builds/*.sha*
+          if-no-files-found: error
+      - name: Clean up keychain used for signing certificate
+        if: ${{ always() }}
+        run: |
+          security delete-keychain "$RUNNER_TEMP/app-signing.keychain-db"
+
+  release:
+    runs-on: macos-10.15
+    needs: [build]
+    steps:
+      - name: Download pre-built emacs-builder artifact
+        uses: actions/download-artifact@v2
+        id: builder
+        with:
+          name: emacs-builder
+          path: bin
+      - name: Ensure emacs-builder is executable
+        run: chmod +x bin/emacs-builder
+      - name: Download build-plan.yml artifact
+        uses: actions/download-artifact@v2
+        id: plan
+        with:
+          name: build-plan.yml
+          path: ./
+      - name: Download disk image artifact
+        uses: actions/download-artifact@v2
+        with:
+          name: dmg
+          path: builds
+      - name: Publish disk image to a GitHub Release
+        run: >-
+          bin/emacs-builder -l debug release --plan build-plan.yml publish
          ${{ github.event.inputs.extraReleaseArgs }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Trigger update casks workflow in homebrew tap
+        run: >-
+          gh workflow run --repo jimeh/homebrew-emacs-builds update-casks.yml
+        env:
+          GITHUB_TOKEN: ${{ secrets.TAP_REPO_TOKEN }}
--- a/.github/workflows/test-build.yml
+++ b/.github/workflows/test-build.yml
@@ -0,0 +1,211 @@
+---
+name: Test Build
+on:
+  workflow_dispatch:
+    inputs:
+      gitRef:
+        description: "Emacs git ref to build"
+        required: true
+        default: "master"
+      emacsBuilderGitRef:
+        description: "Git ref to checkout of build-emacs-for-macos"
+        required: true
+        default: "master"
+      testBuildName:
+        description: "Test build name"
+        required: true
+      testReleaseType:
+        description: "prerelease or draft"
+        required: true
+        default: "prerelease"
+      extraPlanArgs:
+        description: "Extra plan args"
+        required: false
+        default: ""
+      extraCheckArgs:
+        description: "Extra check args"
+        required: false
+        default: ""
+      extraBuildArgs:
+        description: "Extra build args"
+        required: false
+        default: ""
+      extraPackageArgs:
+        description: "Extra package args"
+        required: false
+        default: ""
+      extraReleaseArgs:
+        description: "Extra release args"
+        required: false
+        default: ""
+
+jobs:
+  plan:
+    runs-on: macos-10.15
+    outputs:
+      check: "${{ steps.check.outcome }}"
+    steps:
+      - name: Checkout build-emacs-for-macos repo
+        uses: actions/checkout@v2
+        with:
+          repository: jimeh/build-emacs-for-macos
+          ref: ${{ github.event.inputs.emacsBuilderGitRef }}
+          path: builder
+      - uses: actions/setup-go@v2
+        with:
+          go-version: 1.16
+      - uses: actions/cache@v2
+        id: builder-cache
+        with:
+          path: ~/go/pkg/mod
+          key: ${{ runner.os }}-go-${{ hashFiles('builder/**/go.sum') }}
+          restore-keys: ${{ runner.os }}-go-
+      - name: Pre-build emacs-builder tool
+        run: make build
+        working-directory: builder
+      - name: Plan build
+        run: >-
+          builder/bin/emacs-builder -l debug plan
+          --output build-plan.yml
+          --output-dir '${{ github.workspace }}/builds'
+          --test-build '${{ github.event.inputs.testBuildName }}'
+          --test-release-type '${{ github.event.inputs.testReleaseType }}'
+          ${{ github.event.inputs.extraPlanArgs }}
+          '${{ github.event.inputs.gitRef }}'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Show plan
+        run: cat build-plan.yml
+      - name: Check if planned release and asset already exist
+        id: check
+        continue-on-error: true
+        run: >-
+          builder/bin/emacs-builder -l debug release --plan build-plan.yml check
+          ${{ github.event.inputs.extraCheckArgs }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Upload pre-built emacs-builder artifact
+        uses: actions/upload-artifact@v2
+        with:
+          name: emacs-builder
+          path: builder/bin/emacs-builder
+          if-no-files-found: error
+      - name: Upload build-plan.yml artifact
+        uses: actions/upload-artifact@v2
+        with:
+          name: build-plan.yml
+          path: build-plan.yml
+          if-no-files-found: error
+
+  build:
+    runs-on: macos-10.15
+    needs: [plan]
+    # Only run if check for existing release and asset failed.
+    if: ${{ needs.plan.outputs.check == 'failure' }}
+    steps:
+      - name: Checkout build-emacs-for-macos repo
+        uses: actions/checkout@v2
+        with:
+          repository: jimeh/build-emacs-for-macos
+          ref: ${{ github.event.inputs.emacsBuilderGitRef }}
+          path: builder
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: 2.7
+      - name: Install dependencies
+        run: make bootstrap-ci
+        working-directory: builder
+      - name: Download pre-built emacs-builder artifact
+        uses: actions/download-artifact@v2
+        id: builder
+        with:
+          name: emacs-builder
+          path: bin
+      - name: Ensure emacs-builder is executable
+        run: chmod +x bin/emacs-builder
+      - name: Download build-plan.yml artifact
+        uses: actions/download-artifact@v2
+        id: plan
+        with:
+          name: build-plan.yml
+          path: ./
+      - name: Build Emacs
+        run: >-
+          ./builder/build-emacs-for-macos --plan build-plan.yml
+          --native-full-aot ${{ github.event.inputs.extraBuildArgs }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Install the Apple signing certificate
+        run: |
+          # create variables
+          CERTIFICATE_PATH="$RUNNER_TEMP/build_certificate.p12"
+          KEYCHAIN_PATH="$RUNNER_TEMP/app-signing.keychain-db"
+
+          # import certificate and provisioning profile from secrets
+          echo -n "$CERT_BASE64" | base64 --decode --output "$CERTIFICATE_PATH"
+
+          # create temporary keychain
+          security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+          security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
+          security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
+
+          # import certificate to keychain
+          security import "$CERTIFICATE_PATH" -P "$CERT_PASSWORD" -A \
+            -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
+          security list-keychain -d user -s "$KEYCHAIN_PATH"
+        env:
+          CERT_BASE64: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_P12_BASE64 }}
+          CERT_PASSWORD: ${{ secrets.APPLE_DEVELOPER_CERTIFICATE_PASSWORD }}
+          KEYCHAIN_PASSWORD: ${{ secrets.KEYCHAIN_PASSWORD }}
+      - name: Sign, package and notarize build
+        run: >-
+          bin/emacs-builder -l debug package -v --plan build-plan.yml
+          --sign --remove-source-dir
+          ${{ github.event.inputs.extraPackageArgs }}
+        env:
+          AC_USERNAME: ${{ secrets.AC_USERNAME }}
+          AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
+          AC_PROVIDER: ${{ secrets.AC_PROVIDER }}
+          AC_SIGN_IDENTITY: ${{ secrets.AC_SIGN_IDENTITY }}
+      - name: Upload disk image artifacts
+        uses: actions/upload-artifact@v2
+        with:
+          name: dmg
+          path: |
+            builds/*.dmg
+            builds/*.sha*
+          if-no-files-found: error
+      - name: Clean up keychain used for signing certificate
+        if: ${{ always() }}
+        run: |
+          security delete-keychain "$RUNNER_TEMP/app-signing.keychain-db"
+
+  release:
+    runs-on: macos-10.15
+    needs: [build]
+    steps:
+      - name: Download pre-built emacs-builder artifact
+        uses: actions/download-artifact@v2
+        id: builder
+        with:
+          name: emacs-builder
+          path: bin
+      - name: Ensure emacs-builder is executable
+        run: chmod +x bin/emacs-builder
+      - name: Download build-plan.yml artifact
+        uses: actions/download-artifact@v2
+        id: plan
+        with:
+          name: build-plan.yml
+          path: ./
+      - name: Download disk image artifact
+        uses: actions/download-artifact@v2
+        with:
+          name: dmg
+          path: builds
+      - name: Publish disk image to GitHub Release
+        run: >-
+          bin/emacs-builder -l debug release --plan build-plan.yml publish
+          ${{ github.event.inputs.extraReleaseArgs }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
--- a/README.md
+++ b/README.md
@@ -7,15 +7,17 @@
 </h1>

 <p align="center">
-  <a href="https://github.com/jimeh/emacs-builds/releases">
-    <img src="https://img.shields.io/github/v/tag/jimeh/emacs-builds?label=nightly" alt="GitHub tag (latest SemVer)">
+  <a href="https://github.com/jimeh/emacs-builds/releases/latest">
+    <img alt="GitHub release (latest)" src="https://img.shields.io/github/v/release/jimeh/emacs-builds?include_prereleases&style=flat&label=nightly&color=%237F5AB6&logo=GNU%20Emacs&logoColor=white&sort=semver">
  </a>
  <a href="https://github.com/jimeh/emacs-builds/issues">
-    <img src="https://img.shields.io/github/issues-raw/jimeh/emacs-builds.svg?style=flat&logo=github&logoColor=white"
-alt="GitHub issues">
+    <img alt="GitHub issues" src="https://img.shields.io/github/issues-raw/jimeh/emacs-builds?style=flat&logo=github&colorColor=white">
  </a>
  <a href="https://github.com/jimeh/emacs-builds/pulls">
-    <img src="https://img.shields.io/github/issues-pr-raw/jimeh/emacs-builds.svg?style=flat&logo=github&logoColor=white" alt="GitHub pull requests">
+    <img alt="GitHub pull requests" src="https://img.shields.io/github/issues-pr-raw/jimeh/emacs-builds?style=flat&logo=github&colorColor=white">
+  </a>
+  <a href="https://github.com/jimeh/emacs-builds/releases">
+    <img alt="GitHub all releases" src="https://img.shields.io/github/downloads/jimeh/emacs-builds/total?style=flat&logoColor=white&logo=data%3Aimage%2Fpng%3Bbase64,iVBORw0KGgoAAAANSUhEUgAAAA4AAAAOCAYAAAAfSC3RAAAEsmlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPD94cGFja2V0IGJlZ2luPSLvu78iIGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4KPHg6eG1wbWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iWE1QIENvcmUgNS41LjAiPgogPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4KICA8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIgogICAgeG1sbnM6ZXhpZj0iaHR0cDovL25zLmFkb2JlLmNvbS9leGlmLzEuMC8iCiAgICB4bWxuczp0aWZmPSJodHRwOi8vbnMuYWRvYmUuY29tL3RpZmYvMS4wLyIKICAgIHhtbG5zOnBob3Rvc2hvcD0iaHR0cDovL25zLmFkb2JlLmNvbS9waG90b3Nob3AvMS4wLyIKICAgIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLyIKICAgIHhtbG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIgogICAgeG1sbnM6c3RFdnQ9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZUV2ZW50IyIKICAgZXhpZjpQaXhlbFhEaW1lbnNpb249IjE0IgogICBleGlmOlBpeGVsWURpbWVuc2lvbj0iMTQiCiAgIGV4aWY6Q29sb3JTcGFjZT0iMSIKICAgdGlmZjpJbWFnZVdpZHRoPSIxNCIKICAgdGlmZjpJbWFnZUxlbmd0aD0iMTQiCiAgIHRpZmY6UmVzb2x1dGlvblVuaXQ9IjIiCiAgIHRpZmY6WFJlc29sdXRpb249IjcyLjAiCiAgIHRpZmY6WVJlc29sdXRpb249IjcyLjAiCiAgIHBob3Rvc2hvcDpDb2xvck1vZGU9IjMiCiAgIHBob3Rvc2hvcDpJQ0NQcm9maWxlPSJzUkdCIElFQzYxOTY2LTIuMSIKICAgeG1wOk1vZGlmeURhdGU9IjIwMjEtMDUtMThUMDE6MjU6NTQrMDE6MDAiCiAgIHhtcDpNZXRhZGF0YURhdGU9IjIwMjEtMDUtMThUMDE6MjU6NTQrMDE6MDAiPgogICA8eG1wTU06SGlzdG9yeT4KICAgIDxyZGY6U2VxPgogICAgIDxyZGY6bGkKICAgICAgc3RFdnQ6YWN0aW9uPSJwcm9kdWNlZCIKICAgICAgc3RFdnQ6c29mdHdhcmVBZ2VudD0iQWZmaW5pdHkgRGVzaWduZXIgMS45LjMiCiAgICAgIHN0RXZ0OndoZW49IjIwMjEtMDUtMThUMDE6MjU6NTQrMDE6MDAiLz4KICAgIDwvcmRmOlNlcT4KICAgPC94bXBNTTpIaXN0b3J5PgogIDwvcmRmOkRlc2NyaXB0aW9uPgogPC9yZGY6UkRGPgo8L3g6eG1wbWV0YT4KPD94cGFja2V0IGVuZD0iciI%2FPnP7qIwAAAGBaUNDUHNSR0IgSUVDNjE5NjYtMi4xAAAokXWRzytEURTHP2aIGBEWFhaThtWM%2FKiJjTLSUJM0RhlsZp55M2rezOu9N2myVbaKEhu%2FFvwFbJW1UkRKdsqa2KDnPKNGMud27vnc773ndO%2B54IplFc2s7gUtZxnRcMg7G5%2Fz1j5SQwvQzEBCMfWRqakIFe3thionXgWcWpXP%2FWsNiylTgao64WFFNyzhceHIsqU7vCncpmQSi8LHwn5DLih87ejJEj85nC7xh8NGLDoKrmZhb%2FoXJ3%2BxkjE0YXk5Pi1bUH7u47zEk8rNTEvsFO%2FAJEqYEF4mGGOUIH0MyRwkQD89sqJCfu93%2FiR5yVVk1ilisESaDBZ%2BUQtSPSVRFT0lI0vR6f%2FfvprqQH%2BpuicENQ%2B2%2FdIFtRvwuW7b7%2Fu2%2FXkA7ns4y5Xz83sw%2BCr6elnz7ULTKpycl7XkFpyuQfudnjAS35Jb3KWq8HwEjXFovYT6%2BVLPfvY5vIXYinzVBWzvQLecb1r4AjtZZ9JRQIRfAAAACXBIWXMAAAsTAAALEwEAmpwYAAAAhUlEQVQokb3QsQnDMBRF0Y9J6QGylCt7GI%2BRPdJ4BIMXyA4pM0KKk0YCYawogZAHH4Tuvw%2BhiEowY67xarBirfHu68afijjXFvesK8AQEXeMB9KU2HDU2GPDE2P%2BHEzpbkNfe04pP9K8lw7knLa0k69pPpP%2BFyzaWfL%2BqXAvEXFr9K%2F58AJFIbDLRt48DAAAAABJRU5ErkJggg%3D%3D&color=blue&label=total%20downloads">
  </a>
 </p>

@@ -29,61 +31,144 @@ alt="GitHub issues">
 ## Features

 - Self-contained Emacs.app application bundle, with no external dependencies.
- Native-compilation is enabled in nightly builds from the `master` branch of
-  Emacs, and should just work without the need to install GCC, libgccjit, or any
-  other dependencies.
+- Native-compilation ([gccemacs][]).
+- Native JSON parsing via libjansson.
+- SVG rendering via librsvg.
+- Various image formats are supported via macOS native image APIs.
+- Xwidget-webkit support is enabled, allowing access to a embedded WebKit-based
+  browser with `M-x xwidget-webkit-browse-url`.
+- Native XML parsing via libxml2.
+- Dynamic module loading.
 - Includes the [fix-window-role][] and [system-appearance][] patches from the
  excellent [emacs-plus][] project.
+- Emacs source is fetched from the [emacs-mirror/emacs][] GitHub repository.
 - Build creation is transparent and public through the use of GitHub Actions,
  allowing anyone to inspect git commit SHAs, full source code, and exact
-  commands used to produce a build. This is especially important right now as
-  builds are not yet signed and notarized.
+  commands used to produce a build.
+- Emacs.app is signed with a developer certificate and notarized by Apple.
+- Uses [build-emacs-for-macos][] to build the self-contained application bundle.

+[build-emacs-for-macos]: https://github.com/jimeh/build-emacs-for-macos
+[gccemacs]: https://www.emacswiki.org/emacs/GccEmacs
 [fix-window-role]:
  https://github.com/d12frosted/homebrew-emacs-plus/blob/master/patches/emacs-28/fix-window-role.patch
 [system-appearance]:
  https://github.com/d12frosted/homebrew-emacs-plus/blob/master/patches/emacs-28/system-appearance.patch
 [emacs-plus]: https://github.com/d12frosted/homebrew-emacs-plus
+[emacs-mirror/emacs]: https://github.com/emacs-mirror/emacs

 ## System Requirements

 - Intel-based Mac running macOS 10.15.x or later.

-## Downloads
+## Installation
+
+### Manual Download

 See the [Releases][] page to download latest builds.

+Nightly builds of Emacs are for the part just fine, but if you don't like living
+too close to the edge, see issue [#7 Known Good Nightly Builds][7] for a list of
+recent nightly builds which have been actively used by a living being without
+any issues.
+
 [releases]: https://github.com/jimeh/emacs-builds/releases
+[7]: https://github.com/jimeh/emacs-builds/issues/7
+
+### Homebrew Cask
+
+1. Install the `jimeh/emacs-builds` Homebrew tap:
+   ```
+   brew tap jimeh/emacs-builds
+   ```
+2. Install one of the available casks:
+   - `emacs-app-nightly` for the latest nightly build:
+     ```
+     brew install --cask emacs-app-nightly
+     ```
+   - `emacs-app-good` for the latest known good nightly build listed on [#7][7]:
+     ```
+     brew install --cask emacs-app-good
+     ```
+
+[7]: https://github.com/jimeh/emacs-builds/issues/7
+
+## Use Emacs.app as `emacs` CLI Tool
+
+### Installed via Homebrew Cask
+
+The cask installation method sets up CLI usage automatically by exposing a
+`emacs` command. However it will launch Emacs into GUI mode. To instead have
+`emacs` in your terminal open a terminal instance of Emacs, add the following
+alias to your shell setup:
+
+```bash
+alias emacs="emacs -nw"
+```
+
+### Installed Manually
+
+Builds come with a custom `emacs` shell script launcher for use from the command
+line, located next to `emacsclient` in `Emacs.app/Contents/MacOS/bin`.
+
+The custom `emacs` script makes sure to use the main
+`Emacs.app/Contents/MacOS/Emacs` executable from the correct path, ensuring it
+finds all the relevant dependencies within the Emacs.app bundle, regardless of
+if it's exposed via `PATH` or symlinked from elsewhere.
+
+To use it, simply add `Emacs.app/Contents/MacOS/bin` to your `PATH`. For
+example, if you place Emacs.app in `/Applications`:
+
+```bash
+if [ -d "/Applications/Emacs.app/Contents/MacOS/bin" ]; then
+  export PATH="/Applications/Emacs.app/Contents/MacOS/bin:$PATH"
+  alias emacs="emacs -nw" # Always launch "emacs" in terminal mode.
+fi
+```
+
+If you want `emacs` in your terminal to launch a GUI instance of Emacs, don't
+use the alias from the above example.

 ## Build Process

 Building Emacs is done using the [jimeh/build-emacs-for-macos][] build script,
-executed within a GitHub Actions workflow. This is why macOS 10.15.x or later is
-required, as it's the oldest version of macOS available in GitHub Actions.
+executed within a GitHub Actions [workflow][]. This is why macOS 10.15.x or
+later is required, as it's the oldest version of macOS available in GitHub
+Actions.
+
+[jimeh/build-emacs-for-macos]: https://github.com/jimeh/build-emacs-for-macos
+[workflow]:
+  https://github.com/jimeh/emacs-builds/blob/main/.github/workflows/build.yml

 Full history for all builds is available on GitHub Actions [here][actions].

-[jimeh/build-emacs-for-macos]: https://github.com/jimeh/build-emacs-for-macos
 [actions]: https://github.com/jimeh/emacs-builds/actions

-Nightly builds are scheduled for 0:30 UTC every night, based on the latest
+Nightly builds are scheduled for 0:00 UTC every night, based on the latest
 commit from the `master` branch of the [emacs-mirror/emacs][] repository. This
 means a nightly build will only be produced if there have been new commits since
 the last nightly build.

+## Application Signing / Trust
+
+As of June 21st, 2021, all builds are fully signed and notarized. The signing
+certificate used is: `Developer ID Application: Jim Myhrberg (5HX66GF82Z)`
+
+To verify the application signature and notarization, you can use `spctl`:
+
+```bash
+$ spctl -vvv --assess --type exec /Applications/Emacs.app
+/Applications/Emacs.app: accepted
+source=Notarized Developer ID
+origin=Developer ID Application: Jim Myhrberg (5HX66GF82Z)
+```
+
+All builds also come with a SHA256 checksum file, which itself can be double
+checked against the SHA256 checksum log output from the packaging step of the
+GitHub Actions workflow run which produced the build.
+
 [emacs-mirror/emacs]: https://github.com/emacs-mirror/emacs

-## Untrusted Application
-
-Currently builds are not signed or notarized, meaning macOS cannot verify
-Emacs.app came from a trusted developer, and by default you are not given and
-option to trust the app and open it.
-
-Simplest way around this is to right-click (or control-click) on the Emacs app
-in Finder and select "Open". You will then be given the same warning as before,
-but with a "Open" button now available to trust and open the app. After that you
-can open the application like normal without any warnings.
-
 ## Issues / To-Do

 Please see [Issues][] for details of things to come, or to report issues.
--- a/cmd/dylib-tree/main.go
+++ b/cmd/dylib-tree/main.go
@@ -0,0 +1,248 @@
+package main
+
+import (
+	"debug/macho"
+	"fmt"
+	"os"
+	"path/filepath"
+	"regexp"
+	"strings"
+
+	"github.com/urfave/cli/v2"
+	"github.com/xlab/treeprint"
+)
+
+var app = &cli.App{
+	Name:      "dylib-tree",
+	Usage:     "recursive list shared-libraries as a tree",
+	UsageText: "dylib-tree [options] <binary-file> [<binary-file>]",
+	Flags: []cli.Flag{
+		&cli.IntFlag{
+			Name:  "depth",
+			Usage: "max depth of tree (default: 0 = unlimited)",
+			Value: 0,
+		},
+		&cli.StringSliceFlag{
+			Name:  "ignore",
+			Usage: "path patterns to ignore",
+		},
+
+		&cli.BoolFlag{
+			Name:  "ignore-system",
+			Usage: "ignore system libraries",
+		},
+		&cli.BoolFlag{
+			Name: "real-path",
+			Usage: "show resolved full paths instead of @executable_path " +
+				"and @rpath",
+		},
+	},
+	Action: actionHandler(LinkTreeCmd),
+}
+
+type Context struct {
+	Root           string
+	ExecutablePath string
+	Depth          int
+	MaxDepth       int
+	RealPath       bool
+	Ignore         []string
+	RPaths         []string
+}
+
+func (s *Context) WithFile(filename string) *Context {
+	ctx := *s
+	ctx.Root = filename
+	ctx.ExecutablePath = filepath.Dir(filename)
+	return &ctx
+}
+
+func (s *Context) WithDepth(depth int) *Context {
+	ctx := *s
+	ctx.Depth = depth
+	return &ctx
+}
+
+func (s *Context) WithIgnore(ignore []string) *Context {
+	ctx := *s
+	ctx.Ignore = append(ctx.Ignore, ignore...)
+	return &ctx
+}
+
+func (s *Context) WithRpaths(rpaths []string) *Context {
+	ctx := *s
+	ctx.RPaths = append(ctx.RPaths, rpaths...)
+	return &ctx
+}
+
+func actionHandler(
+	f func(*cli.Context, *Context) error,
+) func(*cli.Context) error {
+	return func(c *cli.Context) error {
+		ignore := c.StringSlice("ignore")
+		if c.Bool("ignore-system") {
+			ignore = append(
+				ignore,
+				"/System/Library/*",
+				"*/libSystem.*.dylib",
+				"*/libobjc.*.dylib",
+			)
+		}
+
+		ctx := &Context{
+			Ignore:   ignore,
+			MaxDepth: c.Int("depth"),
+			RealPath: c.Bool("real-path"),
+		}
+
+		return f(c, ctx)
+	}
+}
+
+func LinkTreeCmd(c *cli.Context, ctx *Context) error {
+	for _, filename := range c.Args().Slice() {
+		ctx := ctx.WithFile(filename)
+
+		treeRoot := treeprint.New()
+		tree := treeRoot.AddBranch(filename)
+
+		err := processBinary(&tree, ctx, filename)
+		if err != nil {
+			return err
+		}
+
+		fmt.Println(treeRoot.String())
+	}
+	return nil
+}
+
+func processBinary(
+	parent *treeprint.Tree,
+	ctx *Context,
+	filename string,
+) error {
+	f, err := macho.Open(filename)
+	if err != nil {
+		return err
+	}
+
+	ctx = ctx.WithDepth(ctx.Depth + 1).WithRpaths(getRpaths(f))
+
+	if ctx.MaxDepth > 0 && ctx.Depth > ctx.MaxDepth {
+		return nil
+	}
+
+	libs, err := f.ImportedLibraries()
+	if err != nil {
+		return err
+	}
+
+	for _, lib := range libs {
+		skip, err := ignoreLib(ctx, lib)
+		if err != nil {
+			return err
+		}
+		if skip {
+			continue
+		}
+
+		filename, err := resolveLibFilename(ctx, lib)
+		if err != nil {
+			(*parent).AddBranch(lib)
+			continue
+		}
+
+		skip, err = ignoreLib(ctx, filename)
+		if err != nil {
+			return err
+		}
+		if skip {
+			continue
+		}
+
+		displayName := lib
+		if ctx.RealPath {
+			displayName = filename
+		}
+
+		tree := (*parent).AddBranch(displayName)
+
+		err = processBinary(&tree, ctx, filename)
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+func ignoreLib(ctx *Context, lib string) (bool, error) {
+	for _, pattern := range ctx.Ignore {
+		m, err := ignoreRegexp(pattern)
+		if err != nil {
+			return false, err
+		}
+
+		if m.MatchString(lib) {
+			return true, nil
+		}
+	}
+
+	return false, nil
+}
+
+func ignoreRegexp(p string) (*regexp.Regexp, error) {
+	rp := "^" + regexp.QuoteMeta(p) + "$"
+	rp = strings.ReplaceAll(rp, `\*`, ".*")
+	rp = strings.ReplaceAll(rp, `\?`, ".")
+
+	return regexp.Compile(rp)
+}
+
+func resolveLibFilename(ctx *Context, lib string) (string, error) {
+	filename := lib
+
+	if strings.HasPrefix(lib, "@executable_path") {
+		filename = filepath.Join(ctx.ExecutablePath, lib[16:])
+	} else if strings.HasPrefix(lib, "@rpath") {
+		for _, r := range ctx.RPaths {
+			if strings.HasPrefix(r, "@executable_path") {
+				r = filepath.Join(ctx.ExecutablePath, r[16:])
+			}
+
+			rfile := filepath.Join(r, lib[6:])
+			_, err := os.Stat(rfile)
+			if err != nil {
+				continue
+			}
+
+			return rfile, nil
+		}
+
+		return "", fmt.Errorf("could not find %s", lib)
+	}
+
+	_, err := os.Stat(filename)
+
+	return filename, err
+}
+
+func getRpaths(f *macho.File) []string {
+	paths := []string{}
+
+	for _, i := range f.Loads {
+		if r, ok := i.(*macho.Rpath); ok {
+			paths = append(paths, r.Path)
+		}
+	}
+
+	return paths
+}
+
+func main() {
+	err := app.Run(os.Args)
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "ERROR: %s\n", err.Error())
+		os.Exit(1)
+	}
+}
--- a/cmd/github-release/check_cmd.go
+++ b/cmd/github-release/check_cmd.go
@@ -1,57 +0,0 @@
-package main
-
-import (
-	"fmt"
-	"net/http"
-	"path/filepath"
-
-	"github.com/urfave/cli/v2"
-)
-
-func checkCmd() *cli.Command {
-	return &cli.Command{
-		Name:      "check",
-		Usage:     "Check if GitHub release and asset exists",
-		UsageText: "github-release [global options] check [options]",
-		Action:    actionHandler(checkAction),
-	}
-}
-
-func checkAction(c *cli.Context, opts *globalOptions) error {
-	gh := opts.gh
-	repo := opts.repo
-	plan, err := LoadPlan(opts.plan)
-	if err != nil {
-		return err
-	}
-
-	fmt.Printf(
-		"==> Checking github.com/%s for release: %s\n",
-		repo.String(), plan.Release,
-	)
-
-	release, resp, err := gh.Repositories.GetReleaseByTag(
-		c.Context, repo.Owner, repo.Name, plan.Release,
-	)
-	if err != nil {
-		if resp.StatusCode == http.StatusNotFound {
-			return fmt.Errorf("release %s does not exist", plan.Release)
-		} else {
-			return err
-		}
-	}
-
-	fmt.Println("    -> Release exists")
-
-	filename := filepath.Base(plan.Archive)
-
-	fmt.Printf("==> Checking release for asset: %s\n", filename)
-	for _, a := range release.Assets {
-		if a.Name != nil && filename == *a.Name {
-			fmt.Println("    -> Asset exists")
-			return nil
-		}
-	}
-
-	return fmt.Errorf("release does contain asset: %s", filename)
-}
--- a/cmd/github-release/commit.go
+++ b/cmd/github-release/commit.go
@@ -1,46 +0,0 @@
-package main
-
-import (
-	"fmt"
-	"time"
-
-	"github.com/google/go-github/v35/github"
-)
-
-type Commit struct {
-	Repo      *Repo      `yaml:"repo"`
-	Ref       string     `yaml:"ref"`
-	SHA       string     `yaml:"sha"`
-	Date      *time.Time `yaml:"date"`
-	Author    string     `yaml:"author"`
-	Committer string     `yaml:"committer"`
-	Message   string     `yaml:"message"`
-}
-
-func NewCommit(repo *Repo, ref string, rc *github.RepositoryCommit) *Commit {
-	return &Commit{
-		Repo: repo,
-		Ref:  ref,
-		SHA:  rc.GetSHA(),
-		Date: rc.GetCommit().GetCommitter().Date,
-		Author: fmt.Sprintf(
-			"%s <%s>",
-			rc.GetCommit().GetAuthor().GetName(),
-			rc.GetCommit().GetAuthor().GetEmail(),
-		),
-		Committer: fmt.Sprintf(
-			"%s <%s>",
-			rc.GetCommit().GetCommitter().GetName(),
-			rc.GetCommit().GetCommitter().GetEmail(),
-		),
-		Message: rc.GetCommit().GetMessage(),
-	}
-}
-
-func (s *Commit) ShortSHA() string {
-	return s.SHA[0:7]
-}
-
-func (s *Commit) DateString() string {
-	return s.Date.Format("2006-01-02")
-}
--- a/cmd/github-release/github.go
+++ b/cmd/github-release/github.go
@@ -1,22 +0,0 @@
-package main
-
-import (
-	"context"
-	"net/http"
-
-	"github.com/google/go-github/v35/github"
-	"golang.org/x/oauth2"
-)
-
-func NewGitHubClient(ctx context.Context, token string) *github.Client {
-	var tc *http.Client
-
-	if token != "" {
-		ts := oauth2.StaticTokenSource(
-			&oauth2.Token{AccessToken: token},
-		)
-		tc = oauth2.NewClient(ctx, ts)
-	}
-
-	return github.NewClient(tc)
-}
--- a/cmd/github-release/main.go
+++ b/cmd/github-release/main.go
@@ -1,74 +0,0 @@
-package main
-
-import (
-	"fmt"
-	"os"
-
-	"github.com/google/go-github/v35/github"
-	"github.com/urfave/cli/v2"
-)
-
-var app = &cli.App{
-	Name:  "github-release",
-	Usage: "manage GitHub releases",
-	Flags: []cli.Flag{
-		&cli.StringFlag{
-			Name:    "github-token",
-			Aliases: []string{"t"},
-			Usage:   "GitHub API Token (read from GITHUB_TOKEN if set)",
-		},
-		&cli.StringFlag{
-			Name:    "release-repo",
-			Aliases: []string{"r"},
-			Usage:   "Owner/name of GitHub repo to publish releases to",
-			EnvVars: []string{"GITHUB_REPOSITORY"},
-			Value:   "jimeh/emacs-builds",
-		},
-		&cli.PathFlag{
-			Name:      "plan",
-			Aliases:   []string{"p"},
-			Usage:     "Load plan from `FILE`",
-			EnvVars:   []string{"BUILD_PLAN"},
-			Required:  true,
-			TakesFile: true,
-		},
-	},
-	Commands: []*cli.Command{
-		checkCmd(),
-		publishCmd(),
-		planCmd(),
-	},
-}
-
-type globalOptions struct {
-	gh   *github.Client
-	repo *Repo
-	plan string
-}
-
-func actionHandler(
-	f func(*cli.Context, *globalOptions) error,
-) func(*cli.Context) error {
-	return func(c *cli.Context) error {
-		token := c.String("github-token")
-		if t := os.Getenv("GITHUB_TOKEN"); t != "" {
-			token = t
-		}
-
-		opts := &globalOptions{
-			gh:   NewGitHubClient(c.Context, token),
-			repo: NewRepo(c.String("release-repo")),
-			plan: c.String("plan"),
-		}
-
-		return f(c, opts)
-	}
-}
-
-func main() {
-	err := app.Run(os.Args)
-	if err != nil {
-		fmt.Fprintf(os.Stderr, "ERROR: %s\n", err.Error())
-		os.Exit(1)
-	}
-}
--- a/cmd/github-release/os_info.go
+++ b/cmd/github-release/os_info.go
@@ -1,40 +0,0 @@
-package main
-
-import (
-	"os/exec"
-	"strings"
-)
-
-type OSInfo struct {
-	Name    string `yaml:"name"`
-	Version string `yaml:"version"`
-	Arch    string `yaml:"arch"`
-}
-
-func NewOSInfo() (*OSInfo, error) {
-	version, err := exec.Command("sw_vers", "-productVersion").CombinedOutput()
-	if err != nil {
-		return nil, err
-	}
-
-	arch, err := exec.Command("uname", "-m").CombinedOutput()
-	if err != nil {
-		return nil, err
-	}
-
-	return &OSInfo{
-		Name:    "macOS",
-		Version: strings.TrimSpace(string(version)),
-		Arch:    strings.TrimSpace(string(arch)),
-	}, nil
-}
-
-func (s *OSInfo) ShortVersion() string {
-	parts := strings.Split(s.Version, ".")
-	max := len(parts)
-	if max > 2 {
-		max = 2
-	}
-
-	return strings.Join(parts[0:max], ".")
-}
--- a/cmd/github-release/plan.go
+++ b/cmd/github-release/plan.go
@@ -1,26 +0,0 @@
-package main
-
-import (
-	"os"
-
-	"gopkg.in/yaml.v3"
-)
-
-type Plan struct {
-	Commit  *Commit `yaml:"commit"`
-	OS      *OSInfo `yaml:"os"`
-	Release string  `yaml:"release"`
-	Archive string  `yaml:"archive"`
-}
-
-func LoadPlan(filename string) (*Plan, error) {
-	b, err := os.ReadFile(filename)
-	if err != nil {
-		return nil, err
-	}
-
-	plan := &Plan{}
-	err = yaml.Unmarshal(b, plan)
-
-	return plan, err
-}
--- a/cmd/github-release/plan_cmd.go
+++ b/cmd/github-release/plan_cmd.go
@@ -1,110 +0,0 @@
-package main
-
-import (
-	"bytes"
-	"fmt"
-	"os"
-	"path/filepath"
-	"regexp"
-
-	"github.com/urfave/cli/v2"
-	"gopkg.in/yaml.v3"
-)
-
-var nonAlphaNum = regexp.MustCompile(`[^\w-_]+`)
-
-func planCmd() *cli.Command {
-	wd, err := os.Getwd()
-	if err != nil {
-		wd = ""
-	}
-
-	return &cli.Command{
-		Name:      "plan",
-		Usage:     "Plan if GitHub release and asset exists",
-		UsageText: "github-release [global options] plan [<branch/tag>]",
-		Flags: []cli.Flag{
-			&cli.StringFlag{
-				Name:    "emacs-mirror-repo",
-				Usage:   "Github owner/repo to get Emacs commit info from",
-				Aliases: []string{"e"},
-				EnvVars: []string{"EMACS_MIRROR_REPO"},
-				Value:   "emacs-mirror/emacs",
-			},
-			&cli.StringFlag{
-				Name:  "work-dir",
-				Usage: "Github owner/repo to get Emacs commit info from",
-				Value: wd,
-			},
-			&cli.StringFlag{
-				Name:  "sha",
-				Usage: "Override commit SHA of specified git branch/tag",
-			},
-		},
-		Action: actionHandler(planAction),
-	}
-}
-
-func planAction(c *cli.Context, opts *globalOptions) error {
-	gh := opts.gh
-	planFile := opts.plan
-	repo := NewRepo(c.String("emacs-mirror-repo"))
-	buildsDir := filepath.Join(c.String("work-dir"), "builds")
-
-	ref := c.Args().Get(0)
-	if ref == "" {
-		ref = "master"
-	}
-
-	lookupRef := ref
-	if s := c.String("sha"); s != "" {
-		lookupRef = s
-	}
-
-	repoCommit, _, err := gh.Repositories.GetCommit(
-		c.Context, repo.Owner, repo.Name, lookupRef,
-	)
-	if err != nil {
-		return err
-	}
-
-	commit := NewCommit(repo, ref, repoCommit)
-	osInfo, err := NewOSInfo()
-	if err != nil {
-		return err
-	}
-
-	cleanRef := sanitizeString(ref)
-	cleanOS := sanitizeString(osInfo.Name + "-" + osInfo.ShortVersion())
-	cleanArch := sanitizeString(osInfo.Arch)
-
-	releaseName := fmt.Sprintf(
-		"Emacs.%s.%s.%s",
-		commit.DateString(), commit.ShortSHA(), cleanRef,
-	)
-	archiveName := fmt.Sprintf(
-		"Emacs.%s.%s.%s.%s.%s.tbz",
-		commit.DateString(), commit.ShortSHA(), cleanRef, cleanOS, cleanArch,
-	)
-
-	plan := &Plan{
-		Commit:  commit,
-		OS:      osInfo,
-		Release: releaseName,
-		Archive: filepath.Join(buildsDir, archiveName),
-	}
-
-	buf := bytes.Buffer{}
-	enc := yaml.NewEncoder(&buf)
-	enc.SetIndent(2)
-	err = enc.Encode(plan)
-	if err != nil {
-		return err
-	}
-
-	return os.WriteFile(planFile, buf.Bytes(), 0666)
-}
-
-func sanitizeString(s string) string {
-	return nonAlphaNum.ReplaceAllString(s, "-")
-}
--- a/cmd/github-release/publish_cmd.go
+++ b/cmd/github-release/publish_cmd.go
@@ -1,178 +0,0 @@
-package main
-
-import (
-	"crypto/sha256"
-	"fmt"
-	"io"
-	"net/http"
-	"os"
-	"path/filepath"
-
-	"github.com/google/go-github/v35/github"
-	"github.com/urfave/cli/v2"
-)
-
-func publishCmd() *cli.Command {
-	return &cli.Command{
-		Name:      "publish",
-		Usage:     "publish a release",
-		UsageText: "github-release [global-options] publish [options]",
-		Flags: []cli.Flag{
-			&cli.StringFlag{
-				Name:    "release-sha",
-				Aliases: []string{"s"},
-				Usage:   "Git SHA of repo to create release on",
-				EnvVars: []string{"GITHUB_SHA"},
-			},
-			&cli.BoolFlag{
-				Name:    "prerelease",
-				Usage:   "Git SHA of repo to create release on",
-				EnvVars: []string{"RELEASE_PRERELEASE"},
-				Value:   false,
-			},
-		},
-		Action: actionHandler(publishAction),
-	}
-}
-
-func publishAction(c *cli.Context, opts *globalOptions) error {
-	gh := opts.gh
-	repo := opts.repo
-	plan, err := LoadPlan(opts.plan)
-	if err != nil {
-		return err
-	}
-
-	releaseSHA := c.String("release-sha")
-	prerelease := c.Bool("prerelease")
-
-	assetBaseName := filepath.Base(plan.Archive)
-	assetSumFile := plan.Archive + ".sha256"
-
-	if _, err := os.Stat(assetSumFile); os.IsNotExist(err) {
-		fmt.Printf("==> Generating SHA256 sum for %s\n", assetBaseName)
-		assetSum, err := fileSHA256(plan.Archive)
-		if err != nil {
-			return err
-		}
-
-		content := fmt.Sprintf("%s  %s", assetSum, assetBaseName)
-		err = os.WriteFile(assetSumFile, []byte(content), 0666)
-		if err != nil {
-			return err
-		}
-
-		fmt.Printf("    -> Done: %s\n", assetSum)
-	}
-
-	fmt.Printf("==> Checking release %s\n", plan.Release)
-
-	release, resp, err := gh.Repositories.GetReleaseByTag(
-		c.Context, repo.Owner, repo.Name, plan.Release,
-	)
-	if err != nil {
-		if resp.StatusCode == http.StatusNotFound {
-			fmt.Println("    -> Release not found, creating...")
-			release, _, err = gh.Repositories.CreateRelease(
-				c.Context, repo.Owner, repo.Name, &github.RepositoryRelease{
-					Name:            &plan.Release,
-					TagName:         &plan.Release,
-					TargetCommitish: &releaseSHA,
-					Prerelease:      &prerelease,
-				},
-			)
-			if err != nil {
-				return err
-			}
-		} else {
-			return err
-		}
-	}
-
-	if release.GetPrerelease() != prerelease {
-		release.Prerelease = &prerelease
-
-		release, _, err = gh.Repositories.EditRelease(
-			c.Context, repo.Owner, repo.Name, release.GetID(), release,
-		)
-		if err != nil {
-			return err
-		}
-	}
-
-	assetFiles := []string{plan.Archive, assetSumFile}
-
-	for _, fileName := range assetFiles {
-		fileIO, err := os.Open(fileName)
-		if err != nil {
-			return err
-		}
-		defer fileIO.Close()
-
-		fileInfo, err := fileIO.Stat()
-		if err != nil {
-			return err
-		}
-
-		fileBaseName := filepath.Base(fileName)
-		assetExists := false
-
-		fmt.Printf("==> Checking asset %s\n", fileBaseName)
-
-		for _, a := range release.Assets {
-			if a.GetName() != fileBaseName {
-				continue
-			}
-
-			if a.GetSize() == int(fileInfo.Size()) {
-				fmt.Println("    -> Asset already exists")
-				assetExists = true
-			} else {
-				fmt.Println(
-					"    -> Asset exists with wrong file size, deleting...",
-				)
-				_, err := gh.Repositories.DeleteReleaseAsset(
-					c.Context, repo.Owner, repo.Name, a.GetID(),
-				)
-				if err != nil {
-					return err
-				}
-				fmt.Println("       -> Done")
-			}
-
-		}
-
-		if !assetExists {
-			fmt.Println("    -> Asset missing, uploading...")
-			_, _, err = gh.Repositories.UploadReleaseAsset(
-				c.Context, repo.Owner, repo.Name, release.GetID(),
-				&github.UploadOptions{Name: fileBaseName},
-				fileIO,
-			)
-			if err != nil {
-				return err
-			}
-			fmt.Println("       -> Done")
-		}
-
-	}
-
-	fmt.Printf("==> Release available at: %s\n", release.GetHTMLURL())
-
-	return nil
-}
-
-func fileSHA256(filename string) (string, error) {
-	f, err := os.Open(filename)
-	if err != nil {
-		return "", err
-	}
-	defer f.Close()
-
-	h := sha256.New()
-	if _, err := io.Copy(h, f); err != nil {
-		return "", err
-	}
-
-	return fmt.Sprintf("%x", h.Sum(nil)), nil
-}
--- a/cmd/github-release/repo.go
+++ b/cmd/github-release/repo.go
@@ -1,26 +0,0 @@
-package main
-
-import (
-	"fmt"
-	"strings"
-)
-
-type Repo struct {
-	URL   string `yaml:"url"`
-	Owner string `yaml:"owner"`
-	Name  string `yaml:"name"`
-}
-
-func NewRepo(ownerAndRepo string) *Repo {
-	parts := strings.SplitN(ownerAndRepo, "/", 2)
-
-	return &Repo{
-		URL:   fmt.Sprintf("https://github.com/%s/%s", parts[0], parts[1]),
-		Owner: parts[0],
-		Name:  parts[1],
-	}
-}
-
-func (s *Repo) String() string {
-	return s.Owner + "/" + s.Name
-}
--- a/go.mod
+++ b/go.mod
@@ -1,10 +1,11 @@
-module github.com/jimeh/build-emacs
+module github.com/jimeh/emacs-builds

 go 1.16

 require (
 	github.com/google/go-github/v35 v35.1.0
 	github.com/urfave/cli/v2 v2.3.0
+	github.com/xlab/treeprint v1.1.0
 	golang.org/x/oauth2 v0.0.0-20210427180440-81ed05c6b58c
 	gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b
 )
--- a/go.sum
+++ b/go.sum
@@ -41,6 +41,7 @@ github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDk
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
 github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d h1:U+s90UTSYgptZMwQh2aRr3LuazLJIa+Pg3Kc1ylSYVY=
 github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
+github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
 github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
@@ -121,8 +122,12 @@ github.com/shurcooL/sanitized_anchor_name v1.0.0 h1:PdmoCO6wvbs+7yrJyMORt4/BmY5I
 github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
+github.com/stretchr/testify v1.7.0 h1:nwc3DEeHmmLAfoZucVR881uASk0Mfjw8xYJ99tb5CcY=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/urfave/cli/v2 v2.3.0 h1:qph92Y649prgesehzOrQjdWyxFOp/QVM+6imKHad91M=
 github.com/urfave/cli/v2 v2.3.0/go.mod h1:LJmUH05zAU44vOAcrfzZQKsZbVcdbOG8rtL3/XcUArI=
+github.com/xlab/treeprint v1.1.0 h1:G/1DjNkPpfZCFt9CSh6b5/nY4VimlbHF3Rh4obvtzDk=
+github.com/xlab/treeprint v1.1.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0=
 github.com/yuin/goldmark v1.1.25/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.1.32/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
@@ -368,6 +373,7 @@ gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8
 gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.3/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b h1:h8qDotaEPuJATrMmW04NCwg7v22aHH28wwpauUhK9Oo=
 gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
Author	SHA1	Message	Date
Jim Myhrberg	ac5ff5d3c2	docs(readme): update nightly badge to include pre-releases	2021-07-03 00:37:46 +01:00
Jim Myhrberg	13410e3977	feat(builds): add support for building stable Emacs releases As of build-emacs-for-macos v0.6.8, the emacs-builder tool supports handling stable Emacs release differently, so we can easily separate them from the regular nightly builds.	2021-07-03 00:21:55 +01:00
Jim Myhrberg	88f47746e4	fix(cask): trigger cask update in homebrew tap after publishing release	2021-07-02 00:13:17 +01:00
Jim Myhrberg	4ffe25022c	chore(deps): update build-emacs-for-macos to 0.6.5	2021-07-01 23:42:20 +01:00
Jim Myhrberg	00094c131c	docs(readme): improve formatting of Installation section	2021-06-29 02:58:04 +01:00
Jim Myhrberg	26b12fac27	docs(readme): update readme about homebrew cask installation method	2021-06-29 02:42:02 +01:00
Jim Myhrberg	25e2a41b22	chore(deps): update build-emacs-for-macos to 0.6.2 Should fix startup error about missing *.eln files.	2021-06-29 01:31:51 +01:00
Jim Myhrberg	1b2cc6e676	feat(cask): add workflow to trigger homebrew cask formula update on new release This triggers the update formulas workflow in the jimeh/homebrew-emacs-builds repo whenever a release or pre-release is created in jimeh/emacs-builds. This allows the cask formulas to automatically stay up to date with latest nightly builds.	2021-06-29 00:28:47 +01:00
Jim Myhrberg	376125273b	chore(deps): update build-emacs-for-macos to 0.6.1	2021-06-29 00:28:32 +01:00
Jim Myhrberg	832a6ffe75	ci(github): cache god modules to speed up emacs-builder compile time	2021-06-29 00:27:38 +01:00
Jim Myhrberg	72fc6962a7	chore(deps): update build-emacs-for-macos to 0.5.2 Should fix the recent build and signing issues with nightly builds.	2021-06-27 12:35:32 +01:00
Jim Myhrberg	d2d9494a44	chore(deps): update build-emacs-for-macos to 0.5.1	2021-06-27 02:36:42 +01:00
Jim Myhrberg	8d84df095a	docs(readme): update with info about signing and notarization	2021-06-22 03:10:47 +01:00
Jim Myhrberg	6883fd0f12	Merge pull request #10 from jimeh/sign-and-notarize feat(signing)!: sign, notarize and staple Emacs.app and disk image	2021-06-22 00:57:23 +01:00
Jim Myhrberg	ca4e7e2c44	feat(signing)!: sign, notarize and staple Emacs.app and disk image Update the build-emacs-for-macos to v0.5.0, which includes a new emacs-builder CLI tool written in Go, which handles signing, dmg packaging, notarizing and stapling of Emacs builds. The main build process is still handled by the old Ruby script for now however. emacs-builder also includes plan and release commands, negating the need for the our custom github-release CLI tool. BREAKING CHANGE: Release assets are now signed .dmg files instead of .tbz archives.	2021-06-22 00:55:31 +01:00
Jim Myhrberg	ffad4f21d2	docs(readme): update CLI usage section	2021-06-20 18:37:18 +01:00
Jim Myhrberg	b94cb495ae	chore(deps): update build-emacs-for-macos to 0.4.16 - fix(compiling): improve portability of builds - fix(native_comp): crash on launch when gcc homebrew package was not installed	2021-06-07 23:45:49 +01:00
Jim Myhrberg	d6fb7efc3a	chore(deps): update build-emacs-for-macos to 0.4.15 Makes build script itself perform authenticated GitHub API calls when GITHUB_TOKEN environment variable is set.	2021-05-31 23:27:59 +01:00
Jim Myhrberg	cf0c1d0d07	chore(deps): update build-emacs-for-macos to 0.4.14 Adds a "emacs" CLI launcher script next to the "emacsclient" executable in Emacs.app/Contents/MacOS/bin.	2021-05-22 21:11:14 +01:00
Jim Myhrberg	4ce0cf69d5	chore(deps): update build-emacs-for-macos to 0.4.13 Nothing new from a user-point of view. But this introduces the first changes to the build script required to sign and notarize builds.	2021-05-22 18:54:29 +01:00
Jim Myhrberg	831bb394af	docs(readme): add CLI usage section	2021-05-21 11:40:49 +01:00
Jim Myhrberg	7a6e5b52ef	docs(readme): Minor tweaks to features list	2021-05-18 01:53:04 +01:00
Jim Myhrberg	7ffbd12e87	docs(readme): update features list and badges	2021-05-18 01:47:55 +01:00
Jim Myhrberg	4e22cf33ee	chore(deps): update build-emacs-for-macos to 0.4.12 This fixes the issues with SVG rendering, and re-enables librsvg support, meaning builds can render SVG images finally.	2021-05-17 23:17:21 +01:00
Jim Myhrberg	628092755e	docs(readme): update release badge	2021-05-17 12:38:32 +01:00
Jim Myhrberg	27bcad6052	fix(dylib-tree): command name in help output had the old link-tree name	2021-05-17 01:22:59 +01:00
Jim Myhrberg	ff22622f87	chore(deps): fix Go module path in go.mod	2021-05-17 01:19:14 +01:00
Jim Myhrberg	ee642683c4	feat(tools): add dylib-tree tool to list/filter linked dynamic libraries	2021-05-17 01:14:46 +01:00
Jim Myhrberg	56d9178919	ci(test-builds): fix workflow name	2021-05-16 17:36:27 +01:00
Jim Myhrberg	29f5577efe	ci(test-builds): add test builds GitHub Actions workflow This will allow creating test builds using any branch of build-emacs-for-macos or emacs-builds repos, so experimental changes can be verified without affecting the nightly builds.	2021-05-16 17:34:13 +01:00
Jim Myhrberg	8544a650ab	test(builds): add test build options to github-release tool This will allow me to run test builds against experimental branches of the build-emacs-for-macos build script, and publish them under a pre-release "Test Builds" GitHub Release, rather than a normal nightly release.	2021-05-16 17:33:57 +01:00
Jim Myhrberg	31a12fc502	docs(readme): add mention of where Emacs source is fetched from	2021-05-12 00:54:24 +01:00
Jim Myhrberg	cec5748301	docs(readme): add link to build script in Features section Also fix some typos.	2021-05-12 00:49:13 +01:00
Jim Myhrberg	f5ccfd297a	docs(readme): add mention of Known Good Nightly Builds issue	2021-05-12 00:43:21 +01:00
Jim Myhrberg	6d95b9e550	docs(readme): add link to GitHub Actions workflow source	2021-05-12 00:42:55 +01:00
Jim Myhrberg	3072334b7f	feat(builds): change nightly schedule from 0:30 UTC to 0:00 UTC	2021-05-12 00:42:55 +01:00