ci: fix macos openssl build, enable updater artifact generation

Author: michaelhthomas

.github/workflows/release.yml

@@ -90,6 +90,13 @@ jobs:
 
       - uses: swatinem/rust-cache@v2
 
+      # openssl-sys uses pkg-config which doesn't support cross-compilation.
+      # Vendored mode compiles OpenSSL from source using Clang, which handles
+      # both architectures natively on macOS.
+      - name: Use vendored OpenSSL for macOS cross-compilation
+        if: matrix.platform == 'macos-latest'
+        run: echo "OPENSSL_VENDORED=1" >> $GITHUB_ENV
+
       # ── Frontend deps ─────────────────────────────────────────────────────────
       - name: Install frontend dependencies
         working-directory: crates/git-sync-desktop

crates/git-sync-desktop/src-tauri/tauri.conf.json

@@ -23,7 +23,8 @@
 			"icons/128x128@2x.png",
 			"icons/icon.icns",
 			"icons/icon.ico"
-		]
+		],
+		"createUpdaterArtifacts": true
 	},
 	"plugins": {
 		"updater": {

flake.nix

@@ -0,0 +1,37 @@
+{
+  description = "git-sync desktop development environment";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
+    rust-overlay = {
+      url = "github:oxalica/rust-overlay";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    flake-utils.url = "github:numtide/flake-utils";
+  };
+
+  outputs = {
+    nixpkgs,
+    rust-overlay,
+    flake-utils,
+    ...
+  }:
+    flake-utils.lib.eachDefaultSystem (system: let
+      pkgs = import nixpkgs {
+        inherit system;
+        overlays = [rust-overlay.overlays.default];
+      };
+      rustToolchain = pkgs.rust-bin.stable.latest.default.override {
+        extensions = ["rustfmt" "rust-src"];
+      };
+    in {
+      devShells.default = pkgs.mkShell {
+        packages = with pkgs; [
+          rustToolchain
+          nodejs
+          pnpm
+          just
+        ];
+      };
+    });
+}