Update MacOS DMG signing and notarization process via bazel-distribution (#787)

## What is the goal of this PR?

We update the packaging and signing tools used by `//:assemble-platform`
to correctly sign the MacOS package vis-à-vis changes in JVM17, XCode
13+, and Apple notarization process. See
typedb/bazel-distribution#391 for more details.

Author: dmitrii-ubskii

.circleci/config.yml

@@ -33,13 +33,13 @@ executors:
 
   mac-arm64:
     macos:
-      xcode: "12.5.1"
+      xcode: "13.4.1"
     resource_class: macos.m1.medium.gen1
     working_directory: ~/typedb-studio
 
   mac-x86_64:
     macos:
-      xcode: "12.5.1"
+      xcode: "13.4.1"
     working_directory: ~/typedb-studio
 
 
@@ -61,6 +61,10 @@ commands:
     steps:
       - run: brew install bazelisk
 
+  assemble-mac:
+    steps:
+      - run: bazel build //:assemble-platform --compilation_mode=opt --define APPLE_CODE_SIGN=yes --define APPLE_ID=$APPLE_ID --define APPLE_ID_PASSWORD=$APPLE_ID_PASSWORD --define APPLE_TEAM_ID=$APPLE_TEAM_ID --define APPLE_CODE_SIGNING_CERT_PASSWORD=$APPLE_CODE_SIGNING_CERT_PASSWORD --spawn_strategy=local
+
 jobs:
   build-mac-arm64:
     executor: mac-arm64
@@ -71,7 +75,7 @@ jobs:
           export ARTIFACT_USERNAME=$REPO_VATICLE_USERNAME
           export ARTIFACT_PASSWORD=$REPO_VATICLE_PASSWORD
           bazel run @vaticle_dependencies//distribution/artifact:create-netrc
-      - run: bazel build //:assemble-platform --compilation_mode=opt --define APPLE_CODE_SIGN=yes --define APPLE_ID=$APPLE_ID --define APPLE_ID_PASSWORD=$APPLE_ID_PASSWORD --define APPLE_CODE_SIGNING_CERT_PASSWORD=$APPLE_CODE_SIGNING_CERT_PASSWORD --spawn_strategy=local
+      - assemble-mac
       - run: |
           mkdir -p ~/src && cp bazel-bin/assemble-platform.zip ~/src
           mkdir -p ~/dist && cd ~/dist && jar xf ~/src/assemble-platform.zip
@@ -89,7 +93,7 @@ jobs:
           export ARTIFACT_USERNAME=$REPO_VATICLE_USERNAME
           export ARTIFACT_PASSWORD=$REPO_VATICLE_PASSWORD
           bazel run @vaticle_dependencies//distribution/artifact:create-netrc
-      - run: bazel build //:assemble-platform --compilation_mode=opt --define APPLE_CODE_SIGN=yes --define APPLE_ID=$APPLE_ID --define APPLE_ID_PASSWORD=$APPLE_ID_PASSWORD --define APPLE_CODE_SIGNING_CERT_PASSWORD=$APPLE_CODE_SIGNING_CERT_PASSWORD --spawn_strategy=local
+      - assemble-mac
       - run: |
           mkdir -p ~/src && cp bazel-bin/assemble-platform.zip ~/src
           mkdir -p ~/dist && cd ~/dist && jar xf ~/src/assemble-platform.zip

.factory/automation.yml

@@ -77,4 +77,4 @@ release:
       command: |
         git checkout -b release
         git push -f origin release
-        echo "Successfully pushed branch 'release', which triggers a release workflow in CircleCI. The progress of the release can be tracked there."
+        echo "Successfully pushed branch 'release', which triggers a release workflow in CircleCI. The progress of the release can be tracked here: https://app.circleci.com/pipelines/github/vaticle/typedb-studio"

WORKSPACE

@@ -106,7 +106,7 @@ load("@vaticle_dependencies//tool/common:deps.bzl", "vaticle_dependencies_ci_pip
 #####################################################################
 # Load @vaticle_bazel_distribution from (@vaticle_dependencies) #
 #####################################################################
-load("@vaticle_dependencies//distribution:deps.bzl", "vaticle_bazel_distribution")
+load("//dependencies/vaticle:repositories.bzl", "vaticle_bazel_distribution")
 vaticle_bazel_distribution()
 
 # Load //pip

dependencies/vaticle/repositories.bzl

@@ -17,6 +17,13 @@
 
 load("@bazel_tools//tools/build_defs/repo:git.bzl", "git_repository")
 
+def vaticle_bazel_distribution():
+    git_repository(
+        name = "vaticle_bazel_distribution",
+        remote = "https://github.com/vaticle/bazel-distribution",
+        commit = "724aa176da48d126296bd4d3ef07c4905b8a82c8",
+    )
+
 def vaticle_dependencies():
     git_repository(
         name = "vaticle_dependencies",
@@ -35,12 +42,12 @@ def vaticle_typedb_common():
     git_repository(
         name = "vaticle_typedb_common",
         remote = "https://github.com/vaticle/typedb-common",
-        tag = "2.24.10",  # sync-marker: do not remove this comment, this is used for sync-dependencies by @vaticle_typedb_common
+        tag = "2.24.14",  # sync-marker: do not remove this comment, this is used for sync-dependencies by @vaticle_typedb_common
     )
 
 def vaticle_typedb_driver():
     git_repository(
         name = "vaticle_typedb_driver",
         remote = "https://github.com/vaticle/typedb-driver",
-        tag = "2.24.11",  # sync-marker: do not remove this comment, this is used for sync-dependencies by @vaticle_typedb_client_java
+        tag = "2.24.14",  # sync-marker: do not remove this comment, this is used for sync-dependencies by @vaticle_typedb_client_java
     )