disable macos hardened runtime in bundler

xtask/Cargo.toml

@@ -9,4 +9,8 @@ cargo_toml = "0.20"
 log = { workspace = true }
 pico-args = "0.5"
 serde = { version = "1.0", features = ["derive"] }
-tauri-bundler = "1.6"
+# Use the `tauri-bundler` crate from the Tauri repository because it already includes
+# the new macOS' hardened runtime configuration flags.
+# TODO: switch back to crates.io when the tauri-bundler crate is updated.
+tauri-bundler = { git = "https://github.com/tauri-apps/tauri", branch = "1.x" }
+# tauri-bundler = "1.6"

xtask/src/bundle.rs

@@ -102,6 +102,7 @@ fn bundle_settings(workspace_dir: &Path) -> BundleSettings {
         copyright: Some(COPYRIGHT.to_string()),
         category: Some(CATEGORY),
         dmg: dmg_settings(workspace_dir),
+        macos: macos_settings(),
         windows: windows_settings(workspace_dir),
         ..Default::default()
     };
@@ -126,6 +127,13 @@ fn dmg_settings(workspace_dir: &Path) -> DmgSettings {
     settings
 }
 
+fn macos_settings() -> tauri_bundler::MacOsSettings {
+    tauri_bundler::MacOsSettings {
+        hardened_runtime: false,
+        ..Default::default()
+    }
+}
+
 fn windows_settings(workspace_dir: &Path) -> WindowsSettings {
     let icon_path = workspace_dir.join("assets").join(WINDOWS_ICON);