From be70e7250d6a93625f19fd2dd8dc6edf8509a282 Mon Sep 17 00:00:00 2001
From: Evan Debenham <Evan.SHPX@gmail.com>
Date: Wed, 26 Nov 2025 10:24:34 -0500
Subject: [PATCH] v3.3.0: updated notarize to handle new dylib signing issues

---
 desktop/notarize.sh | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/desktop/notarize.sh b/desktop/notarize.sh
index b0b35ab5b..f65bac917 100755
--- a/desktop/notarize.sh
+++ b/desktop/notarize.sh
@@ -16,7 +16,19 @@ PASS="$5"
 TEAM="${CERT#*(}"
 TEAM="${TEAM%)}"
 
-#first sign the naked dylib in /Contents/runtime/Contents/MacOS/libjli.dylib
+#first sign the naked dylibs
+codesign --force --options runtime --timestamp --sign "$CERT" \
+      --entitlements "$PLIST" "${APP}/Contents/runtime/Contents/Home/lib/jspawnhelper"
+codesign --force --options runtime --timestamp --sign "$CERT" \
+      --entitlements "$PLIST" "${APP}/Contents/runtime/Contents/Home/lib/server/libjvm.dylib"
+codesign --force --options runtime --timestamp --sign "$CERT" \
+      --entitlements "$PLIST" "${APP}/Contents/runtime/Contents/Home/lib/server/libjsig.dylib"
+pushd "${APP}/Contents/runtime/Contents/Home/lib/"
+  for LIB in `find . -name '*.dylib'`; do
+    codesign --force --options runtime --timestamp --sign "$CERT" \
+      --entitlements "$PLIST" "${LIB}"
+  done
+popd
 codesign --force --options runtime --timestamp --sign "$CERT" \
       --entitlements "$PLIST" "${APP}/Contents/runtime/Contents/MacOS/libjli.dylib"