ci: add extension signing

Author: dbeley

.github/workflows/release.yml

@@ -15,6 +15,14 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v6
 
+      - name: Setup Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: "24"
+
+      - name: Install dependencies
+        run: npm ci
+
       - name: Extract version from tag
         id: version
         run: echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
@@ -32,6 +40,21 @@ jobs:
           chmod +x build-extension.sh
           ./build-extension.sh
 
+      - name: Sign Firefox XPI
+        env:
+          WEB_EXT_API_KEY: ${{ secrets.WEB_EXT_API_KEY }}
+          WEB_EXT_API_SECRET: ${{ secrets.WEB_EXT_API_SECRET }}
+        run: |
+          npx web-ext sign \
+            --source-dir=comping \
+            --channel=unlisted \
+            --artifacts-dir=build/signed
+
+          # Replace unsigned XPI with signed version
+          SIGNED_XPI=$(ls build/signed/*.xpi)
+          mv "$SIGNED_XPI" "build/comping-${{ steps.version.outputs.VERSION }}.xpi"
+          rm -rf build/signed
+
       - name: Create Release and Upload Assets
         uses: softprops/action-gh-release@v2
         with:
@@ -42,8 +65,9 @@ jobs:
             ### Installation
 
             **Firefox:**
-            - Download `comping-${{ steps.version.outputs.VERSION }}.xpi`
-            - Navigate to `about:addons`, click the gear icon and select "Install Add-on From File..."
+            - Download `comping-${{ steps.version.outputs.VERSION }}.xpi` (signed by Mozilla)
+            - Open the downloaded file with Firefox, or drag and drop it onto Firefox
+            - Click "Add" when prompted
 
             **Chrome:**
             - Download `comping-${{ steps.version.outputs.VERSION }}-chrome.zip`

comping/manifest.json

@@ -1,12 +1,11 @@
 {
   "manifest_version": 2,
   "name": "Comping",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "An add-on to accompany your browsing by adding notes on works cached from Sonemic websites (music, movies, video games).",
   "browser_specific_settings": {
     "gecko": {
-      "id": "comping@dbeley.ovh",
-      "strict_min_version": "91.0"
+      "id": "comping@dbeley.ovh"
     }
   },
   "permissions": [

package.json

@@ -12,8 +12,9 @@
     "build": "./build-extension.sh"
   },
   "devDependencies": {
-    "eslint": "^9.15.0",
-    "globals": "^15.12.0",
-    "prettier": "^3.3.3"
+    "eslint": "^9.39.2",
+    "globals": "^16.5.0",
+    "prettier": "^3.7.4",
+    "web-ext": "^9.2.0"
   }
 }