JOSM 19555 With Java 25 fails macOS Signatures

[krehel]

Hi JOSM Team!

We were attempting to update JOSM in macOS Homebrew and realized the latest JOSM 19555 build using Java 25 appears to not be validly signed, causing it to fail macOS Gatekeeper checks.

The 19555 build using Java 21 does appear to be correct, so this may be a build pipeline issue for your Java 25 artifact.

The GitHub PR is at ​https://github.com/Homebrew/homebrew-cask/pull/256718

[stoecker]

See trunk/.github/workflows/ant.yml​. That's our build action.

I have no idea why it sometimes fails and sometimes works. When you look at "Build and package for MacOs" you see that Java 21 worked, Java 25 failed.

Java 21: ​https://github.com/JOSM/josm/actions/runs/23692662186/job/69148302133
Java 25: ​https://github.com/JOSM/josm/actions/runs/23692662186/job/69148302137

If someone can fix that: Patches are welcome. I never owned a Mac and thus can't help here.

Maybe it doesn't accept parallel requests or the Mac signing service is restricted to Java <21? I have no idea. That service isn't operated by me.

Also a recommendation what has to be done, in case it's on the Apple server side, is welcome. I can forward this to the account holder.

[iandees]

Looking at the most recent build failure: ​https://github.com/JOSM/josm/actions/runs/25518950513/job/74897594000#step:10:107

... it seems that there is a new Apple Developer agreement that needs to be accepted. Can the person that owns this account head to ​https://developer.apple.com/, sign in, and see if there's any agreements that need to be accepted?

[iandees]

Also can the person with access to the Apple credentials run this command to get info about what specifically was rejected:

xcrun notarytool log 17500223-e1cd-4311-87a6-3e21113d4765 \
  --apple-id "$APPLE_ID" \
  --password "$APPLE_ID_PW" \
  --team-id "$APPLE_ID_TEAM"

This should give details for ​this recent failed notarization.

[stoecker]

@Thomas:
Can you have a look?

[anonymous]

Hey Thomas are you on holidays? There is also a ​issue on Github for this. Would be lovely if you could have a look. If the Repo wasn't on svn i might have a look myself ;)