macOS: wire notarization into packaging and close release gates

A real Developer ID build - the first this signing work has had - surfaced
gaps ad-hoc testing couldn't: notarization was never invoke

macOS: wire notarization into packaging and close release gates

A real Developer ID build - the first this signing work has had - surfaced
gaps ad-hoc testing couldn't: notarization was never invoked despite being
supported, Gatekeeper was checked before notarizing, and neither the DMG
nor its enclosed app was independently verified.

Also fixes a discarded license-resource return value and an EPM configure
requirement for package formats that never invoke EPM.

show more ...

Fix macOS language-pack signing, load-path check and sysconfig data

The load-path check matched each dylib's own @_______ ID and so rejected
every signed build; it now looks only for the CPython sta

Fix macOS language-pack signing, load-path check and sysconfig data

The load-path check matched each dylib's own @_______ ID and so rejected
every signed build; it now looks only for the CPython staging prefix.

show more ...

macOS: harden application and disk image signing

Make strict signature verification fail packaging, honor configured
keychains for all artifacts, and limit process entitlements to executable
code. R

macOS: harden application and disk image signing

Make strict signature verification fail packaging, honor configured
keychains for all artifacts, and limit process entitlements to executable
code. Reject unresolved build-time Mach-O load paths before signing.

Use safe argument handling for signing and disk image creation, make
language-pack wrappers valid application bundles, and prevent them from
invalidating signed installations.

Relocate bundled Python's install names, preserve its Darwin sysconfig
data, and update the Spotlight importer for the Contents/program layout.

show more ...

macOS: code-signable bundle layout, opt-in signing of the .app and .dmg
Select patches from the mac-vcl-button-contrast branch.

codesign rejects a bundle with anything but Mach-O binaries in Content

macOS: code-signable bundle layout, opt-in signing of the .app and .dmg
Select patches from the mac-vcl-button-contrast branch.

codesign rejects a bundle with anything but Mach-O binaries in Contents/MacOS,
where scp2 installed everything; the installation now lives in Contents/program.
Signing only runs with --with-macosx-codesigning-identity (or the env var) set.

show more ...

Based on discussion and approvals, make trunk AOO5. For room to spare,
baseline trunk as AOO 51X.

Win10 msvc trunk (#498)

Build trunk on Windows with a modern MSVC

configure.ac required VS2008, but the bundled dependencies had moved past
what VC9 can compile -- boost 1.84 needs C++11, Python 3.

Win10 msvc trunk (#498)

Build trunk on Windows with a modern MSVC

configure.ac required VS2008, but the bundled dependencies had moved past
what VC9 can compile -- boost 1.84 needs C++11, Python 3.11 needs VS2017 or
newer -- so the configured compiler could not build the configured
dependencies, and no combination of the two worked. Every other platform had
already moved; Windows was the one left pinned.

This branch accepts a VS2015-or-newer toolset and the Windows 10 SDK, then
fixes what a modern compiler and SDK find: export lists, entry points, CRT
and manifest handling, and source conformance across the tree. Every
dependency builds, including Python, which trunk has never built on Windows
at all. The CLI/.NET binding is ported from Managed C++ to C++/CLI and its
bridgetest passes.

configure, bootstrap and build.pl now run to completion, and
instsetoo_native produces openoffice450.msi and openoffice450sdk.msi.

coinMp has been updated to the latest Version.

What this does not claim: the office has not been started, and
testtools/source/bridgetest still fails getCaughtException() in the x86 C++
bridge. Python is built without _ssl, _ctypes, _bz2, _lzma and _sqlite3, and
Platform SDK v7.0 is still required alongside the Windows 10 SDK. No other
platform's build is changed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UWgzQY2r1XwFvgeLPFWPsi

show more ...