Sparkle Updates

Sparkle Updates

Ora uses Sparkle for macOS app updates.

Where It Is Configured

• package dependency in project.yml
• update feed URL in project.yml
• generated appcast.xml at the repository root

Repository references:

• https://github.com/the-ora/browser/blob/main/project.yml
• https://github.com/the-ora/browser/blob/main/appcast.xml

What the Release Script Handles

The release workflow prepares Sparkle metadata by:

• ensuring signing tools are available
• generating or loading the update signing keys
• producing appcast.xml
• signing the release artifact
• inserting signature and file size metadata into the appcast

Important Notes

• keep the private signing key out of git
• keep the public key committed so the app can verify updates
• publish the appcast to a stable public URL

Related

• Release Process
• Security