gowalk-cicd 1.0.206 → 1.0.207

package/action/action.yml

@@ -458,6 +458,7 @@ runs:
       if: ${{ inputs.archive == 'true' && inputs.candidate-binary == '' }}
       shell: bash
       env:
+        CONFIGURATION: ${{ inputs.configuration || env.CFG_CONFIGURATION }}
         PROJECT: ${{ inputs.project || env.CFG_PROJECT }}
         WORKSPACE: ${{ inputs.workspace || env.CFG_WORKSPACE }}
         TEAM_ID: ${{ inputs.team-id || env.CFG_TEAM_ID }}

package/action/scripts/pbxproj_editor.py

@@ -102,9 +102,8 @@ def _entitlements_from_configs(
     there — a missed entitlements file costs a clearer error, a wrong one costs
     a wrong App ID edit.
 
-    Only the ARCHIVE configuration counts: CI archives Release, so its
-    CODE_SIGN_ENTITLEMENTS (falling back to Profile, then to every config
-    only when neither exists) decides provisioning. An entitlement wired
+    Only the archive configuration counts. Callers pass that configuration
+    alone when provisioning. An entitlement wired
     into Debug alone — the standard way to simulator-test an Apple-granted
     capability (CarPlay) before the grant lands — must NOT force that
     capability onto the App ID for the archive.
@@ -132,14 +131,14 @@ def _entitlements_from_configs(
     return ""
 
 
-def discover_signable_targets(project_path: str) -> list[dict]:
+def discover_signable_targets(project_path: str, configuration: str = "Release") -> list[dict]:
     """Return one entry per signable native target.
 
     Each entry:
     ``{"name": str, "bundle_id": str, "config_ids": [str,...],
     "entitlements": str}`` where ``config_ids`` is the list of
-    XCBuildConfiguration UUIDs whose ``buildSettings`` dict we need to patch
-    (typically Debug + Release) and ``entitlements`` is the target's
+    selected archive XCBuildConfiguration UUID whose ``buildSettings`` dict
+    we need to patch, and ``entitlements`` is the target's
     CODE_SIGN_ENTITLEMENTS path relative to the project directory ("" when the
     target declares none).
     """
@@ -155,10 +154,20 @@ def discover_signable_targets(project_path: str) -> list[dict]:
         name = obj.get("name") or "<unknown>"
         config_list = objects.get(obj.get("buildConfigurationList")) or {}
         config_ids = list(config_list.get("buildConfigurations") or [])
-        bundle_id = _bundle_id_from_configs(objects, config_ids)
+        selected = [cid for cid in config_ids
+                    if (objects.get(cid) or {}).get("name") == configuration]
+        if len(selected) != 1:
+            raise SystemExit(
+                f"discover_signable_targets: {name!r} has no unique "
+                f"{configuration!r} configuration"
+            )
+        bundle_id = _bundle_id_from_configs(objects, selected)
         if not bundle_id:
-            print(f"skip target {name!r}: no PRODUCT_BUNDLE_IDENTIFIER")
-            continue
+            raise SystemExit(
+                f"discover_signable_targets: {name!r} has no literal "
+                f"PRODUCT_BUNDLE_IDENTIFIER in {configuration!r}"
+            )
+        config_ids = selected
         targets.append(
             {
                 "name": name,

package/action/scripts/prepare_signing.py

@@ -197,7 +197,7 @@ def main() -> None:
     token = make_jwt(env("ASC_KEY_ID"), env("ASC_ISSUER_ID"), env("ASC_KEY_PATH"))
     creds_dir = _resolve_creds_dir()
 
-    targets = discover_signable_targets(project)
+    targets = discover_signable_targets(project, optional_env("CONFIGURATION") or "Release")
     bundle_ids = sorted({t["bundle_id"] for t in targets})
     print(f"Signable targets ({len(targets)}):")
     for t in targets:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.206",
+  "version": "1.0.207",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {