diff --git a/.github/workflows/macos-release-build.yml b/.github/workflows/macos-release-build.yml
index cf7dfb6f5..a4f1772ba 100644
--- a/.github/workflows/macos-release-build.yml
+++ b/.github/workflows/macos-release-build.yml
@@ -127,7 +127,9 @@ jobs:
           p12-password: ${{ secrets.macOS_CERTIFICATES_P12_PASSWORD }}
 
       - name: Import provisioning profile for .app
-        run: echo "${{ secrets.macOS_PROVISIONING_PROFILE }}" | base64 --decode > "zen.provisionprofile"
+        run: |
+          echo "${{ secrets.macOS_PROVISIONING_PROFILE }}" | base64 --decode > ./engine/Zen_Browser.provisionprofile
+          ls -la
 
       - name: Package
         env:
@@ -142,6 +144,10 @@ jobs:
         run: |
           mv ./dist/output.mar macos-${{ matrix.arch }}.mar
 
+      - name: Remove sensitive information
+        run: |
+          rm -f ./engine/Zen_Browser.provisionprofile
+
       - name: Sign .dmg
         run: |
           set -ex
diff --git a/build/codesign/codesign.bash b/build/codesign/codesign.bash
index 3ecb5047b..62d987197 100644
--- a/build/codesign/codesign.bash
+++ b/build/codesign/codesign.bash
@@ -111,6 +111,9 @@ echo "-------------------------------------------------------------------------"
 
 set -x
 
+# move Zen_Browser.provisionprofile to the Contents directory
+cp Zen_Browser.provisionprofile "${BUNDLE}"/Contents/embedded.provisionprofile
+
 # Clear extended attributes which cause codesign to fail
 xattr -cr "${BUNDLE}"
 
diff --git a/l10n b/l10n
index 38c1700d8..1abc46f17 160000
--- a/l10n
+++ b/l10n
@@ -1 +1 @@
-Subproject commit 38c1700d8b40d200e4ffef94c480f96dba86ec39
+Subproject commit 1abc46f17d90b4e38af88539944d4a664568ec4c
diff --git a/package.json b/package.json
index d42c3a8c6..2721e24a8 100644
--- a/package.json
+++ b/package.json
@@ -36,7 +36,7 @@
   },
   "homepage": "https://github.com/zen-browser/core#readme",
   "dependencies": {
-    "@zen-browser/surfer": "^1.9.3"
+    "@zen-browser/surfer": "^1.9.4"
   },
   "devDependencies": {
     "husky": "^9.1.7",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4f496916d..dace21688 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -9,8 +9,8 @@ importers:
   .:
     dependencies:
       '@zen-browser/surfer':
-        specifier: ^1.9.3
-        version: 1.9.3(glob@7.2.3)
+        specifier: ^1.9.4
+        version: 1.9.4(glob@7.2.3)
     devDependencies:
       husky:
         specifier: ^9.1.7
@@ -122,8 +122,8 @@ packages:
   '@types/node@17.0.45':
     resolution: {integrity: sha512-w+tIMs3rq2afQdsPJlODhoUEKzFP1ayaoyl1CcnwtIlsVe7K7bA1NGm4s3PraqTLlXnbIN84zuBlxBWo1u9BLw==}
 
-  '@zen-browser/surfer@1.9.3':
-    resolution: {integrity: sha512-D53XK4/jQcgJKHESjixezCazYTw7orN3Bnogv5RzITRvm79ftYtzSvkrdNwMsmoTJRro8am7VvBLIDfsj2UBeA==}
+  '@zen-browser/surfer@1.9.4':
+    resolution: {integrity: sha512-/HqhTAf67Br+gtIzgEk76vGRZqwW6zX2CV9MTvnoMSXAZaB5rxDBhMI3zvqB5Bl/Sz0akGc6K9u82KbF9W9DtQ==}
     hasBin: true
 
   ansi-escapes@7.0.0:
@@ -1036,7 +1036,7 @@ snapshots:
 
   '@types/node@17.0.45': {}
 
-  '@zen-browser/surfer@1.9.3(glob@7.2.3)':
+  '@zen-browser/surfer@1.9.4(glob@7.2.3)':
     dependencies:
       '@resvg/resvg-js': 1.4.0
       async-icns: 1.0.2