From: Bjørn Erik Pedersen <bjorn.erik.pedersen@gmail.com>
Date: Thu, 27 Nov 2025 19:43:03 +0000 (+0100)
Subject: Add entitlements for WebAssembly for macOS Tahoe
X-Git-Url: http://git.maquefel.me/?a=commitdiff_plain;h=9e24b5645d70eec62566884330da609a94775dd3;p=brevno-suite%2Fhugo

Add entitlements for WebAssembly for macOS Tahoe

Fixes #14220
---

diff --git a/hugoreleaser.yaml b/hugoreleaser.yaml
index 367942cab..b6fce83fe 100644
--- a/hugoreleaser.yaml
+++ b/hugoreleaser.yaml
@@ -10,10 +10,14 @@ definitions:
     plugin:
       id: macospkgremote
       type: gorun
-      command: github.com/gohugoio/hugoreleaser-archive-plugins/macospkgremote@latest
+      command: github.com/gohugoio/hugoreleaser-archive-plugins/macospkgremote@4a5b6981ba006743eede18b41325695a23cb6c07
     custom_settings:
       package_identifier: io.gohugo.hugo
-      package_version: ${HUGORELEASER_TAG}
+      package_version:
+        ${HUGORELEASER_TAG}
+        # Needed by Wazero (currently only used when transform.ToMath is used)
+        # Note that we pass this map to s3 which takes metadata as a map of strings.
+      package_entitlements: "com.apple.security.cs.allow-jit,com.apple.security.cs.allow-unsigned-executable-memory"
       bucket: s3fptest
       queue: https://sqs.eu-north-1.amazonaws.com/656975317043/s3fptest_client
       access_key_id: ${S3RPC_CLIENT_ACCESS_KEY_ID}