Freegle / Iznik / 21326

71%

push

circleci

fix(ios-release): drop hanging NSE produce(), download pre-registered profile

The capacitor-push-notifications-cap7 v7.0.3 bump added the iOS Notification
Service Extension, which activated the fastlane NSE signing path for the first
time. produce() (registering the NSE App ID on the Developer portal) needs
interactive Apple-ID + 2FA that the App Store Connect API key can't satisfy in
CI, so it hung with no output until CircleCI killed build-ios at the 30-min
no-output timeout — breaking every iOS production build.

The NSE App ID (org.ilovefreegle.iphone.NotificationServiceExtension) and its
App Store distribution profile are now registered once by hand in the Apple
Developer portal. Drop produce() entirely and make get_provisioning_profile
readonly so it only downloads the existing profile via the API key (never
attempts interactive creation; fails fast if missing instead of hanging).
SIGH_NAME from the download still flows into the export provisioningProfiles
map, so no name needs hardcoding.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

10827 of 14418 branches covered (75.09%)

Branch coverage included in aggregate %.

117790 of 166219 relevant lines covered (70.86%)

35.83 hits per line