feature fixes

.github/workflows/release.yml

@@ -81,41 +81,16 @@ jobs:
 
   build:
     needs: prepare
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - os: macos-26
-            args: "--target universal-apple-darwin --config src-tauri/tauri.release.conf.json"
-            rust-targets: "aarch64-apple-darwin,x86_64-apple-darwin"
-          # Ubuntu 22.04 is the glibc baseline: the bundle will not run on anything older than the
-          # glibc it was linked against, so build on the oldest supported.
-          - os: ubuntu-22.04
-            args: "--config src-tauri/tauri.release.conf.json"
-            rust-targets: ""
-    runs-on: ${{ matrix.os }}
+    # One runner, no matrix. The app is macOS only, and a universal build links the aarch64 and
+    # x86_64 slices into a single bundle, so there is exactly one thing to build and nothing for a
+    # matrix to vary. A matrix of one is where the Linux row survived long after the app stopped
+    # shipping on Linux; if a second target ever arrives, putting the matrix back is a small change.
+    runs-on: macos-26
     steps:
       - uses: actions/checkout@v7
         with:
           ref: ${{ needs.prepare.outputs.tag }}
 
-      - name: Install Linux dependencies
-        if: startsWith(matrix.os, 'ubuntu')
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y \
-            libwebkit2gtk-4.1-dev \
-            libgtk-3-dev \
-            libayatana-appindicator3-dev \
-            librsvg2-dev \
-            patchelf \
-            libxdo-dev \
-            libssl-dev \
-            build-essential \
-            curl \
-            wget \
-            file
-
       - uses: actions/setup-node@v6
         with:
           node-version: 26
@@ -127,7 +102,7 @@ jobs:
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
         with:
-          targets: ${{ matrix.rust-targets }}
+          targets: aarch64-apple-darwin,x86_64-apple-darwin
 
       - uses: swatinem/rust-cache@v2
         with:
@@ -144,7 +119,7 @@ jobs:
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
         with:
           releaseId: ${{ needs.prepare.outputs.release_id }}
-          args: ${{ matrix.args }}
+          args: "--target universal-apple-darwin --config src-tauri/tauri.release.conf.json"
 
   publish:
     needs: [prepare, build]
@@ -159,7 +134,14 @@ jobs:
           gh release download "$TAG" --repo "$REPO" --pattern latest.json --output latest.json --clobber
           echo "Platforms in latest.json:"
           jq '.platforms | keys' latest.json
-          for key in darwin-aarch64 darwin-x86_64 linux-x86_64; do
+          # A universal build emits one .app.tar.gz, but tauri-action writes it into latest.json
+          # under both darwin-aarch64 and darwin-x86_64, pointing them at the same file and the same
+          # signature. It has to: an installed copy asks the manifest for the architecture it is
+          # running on and never for the universal key, so a manifest that only carried
+          # darwin-universal would offer nobody an update. Those two keys are the whole manifest for
+          # this app, and a release that is missing either one is a release half the users cannot
+          # take.
+          for key in darwin-aarch64 darwin-x86_64; do
             if ! jq -e ".platforms[\"$key\"].url" latest.json > /dev/null; then
               echo "::error::latest.json is missing platform '$key': refusing to publish a partial update manifest. Re-run the release."
               exit 1