Add WebAuthn support and improve codesigning process for macOS

build/codesign/browser.developer.entitlements.xml

@@ -36,5 +36,7 @@
     <key>com.apple.application-identifier</key>
     <string>H36NPCN86W.app.zen-browser.zen</string>
 
+    <!-- For platform passkey (webauthn) support -->
+    <key>com.apple.developer.web-browser.public-key-credential</key><true/>
   </dict>
 </plist>

build/codesign/codesign.bash

@@ -122,11 +122,15 @@ xattr -cr "${BUNDLE}"
 codesign --force -o runtime --verbose --sign "$IDENTITY" \
 "${BUNDLE}/Contents/Library/LaunchServices/org.mozilla.updater" \
 "${BUNDLE}/Contents/MacOS/XUL" \
+"${BUNDLE}"/Contents/embedded.provisionprofile \
 "${BUNDLE}/Contents/MacOS/pingsender"
 
 # Sign every ${BUNDLE}/Contents/MacOS/*.dylib
 find "${BUNDLE}"/Contents/MacOS -type f -name "*.dylib" -exec \
-codesign --force -o runtime --verbose --sign "$IDENTITY" {} \;
+codesign --force --verbose --sign "$IDENTITY" {} \;
+
+find "${BUNDLE}"/Contents/MacOS -type f -name "*.dylib" -exec \
+codesign -vvv --strict --deep --verbose {} \;
 
 codesign --force -o runtime --verbose --sign "$IDENTITY" --deep \
 "${BUNDLE}"/Contents/MacOS/updater.app

configs/macos/mozconfig

@@ -6,15 +6,6 @@ ac_add_options --enable-eme=widevine
 export MOZ_MACBUNDLE_ID=${appId}
 export MOZ_MACBUNDLE_NAME="Zen Browser.app"
 
-if test "$ZEN_RELEASE"; then
-  if test "$ZEN_GA_DISABLE_PGO"; then
-    export ZEN_DUMMY=1
-  else
-    export MOZ_PGO=1
-    ac_add_options MOZ_PGO=1
-  fi
-fi
-
 if test "$SURFER_COMPAT" = "x86_64"; then
     ac_add_options --target=x86_64-apple-darwin