fix: fetch notarization log on failure for debugging

Author: ayangabryl

.github/workflows/release.yml

@@ -75,16 +75,33 @@ jobs:
           DMG_PATH=$(ls build/QuotaBar-*.dmg | head -1)
           echo "📤 Submitting ${DMG_PATH} for notarization..."
 
-          xcrun notarytool submit "$DMG_PATH" \
+          # Submit and capture the submission ID
+          SUBMIT_OUTPUT=$(xcrun notarytool submit "$DMG_PATH" \
             --apple-id "$APPLE_ID" \
             --password "$APPLE_APP_PASSWORD" \
             --team-id "$TEAM_ID" \
-            --wait
-
-          echo "📎 Stapling notarization ticket..."
-          xcrun stapler staple "$DMG_PATH"
-
-          echo "✅ Notarization complete"
+            --wait 2>&1) || true
+
+          echo "$SUBMIT_OUTPUT"
+
+          # Extract submission ID
+          SUBMISSION_ID=$(echo "$SUBMIT_OUTPUT" | grep "id:" | head -1 | awk '{print $2}')
+
+          # Check if notarization succeeded
+          if echo "$SUBMIT_OUTPUT" | grep -q "status: Accepted"; then
+            echo "📎 Stapling notarization ticket..."
+            xcrun stapler staple "$DMG_PATH"
+            echo "✅ Notarization complete"
+          else
+            echo "❌ Notarization failed! Fetching detailed log..."
+            xcrun notarytool log "$SUBMISSION_ID" \
+              --apple-id "$APPLE_ID" \
+              --password "$APPLE_APP_PASSWORD" \
+              --team-id "$TEAM_ID" \
+              developer_log.json 2>&1 || true
+            cat developer_log.json
+            exit 1
+          fi
 
       # ── Clean up keychain ──────────────────────────────────────────────
       - name: Clean up keychain