Stable version
Changelog
The app inside the DMG is stapled
The notarisation ticket was attached to the DMG, never to the app inside it.
Update
Automatic
Content
Release notes
Fixed
- The app inside the DMG now carries its own notarisation ticket. It was attached to the DMG and never to the app it contains: once the app was dragged into Applications and the DMG discarded, the ticket accompanied nothing — and a first launch without a network could then hit a security warning.
No functional change. The release is built differently, though: the app is notarised separately from the DMG, and the packaging script fails if the ticket is missing from inside the DMG it produced.