Bump GDSiON to 0.7-beta7 and fail CI when codesign fails

This should help us prevent unsigned releases
in the future.

Author: YuriSizov

.github/actions/sign-godot-project/macos/sign.sh

@@ -41,7 +41,7 @@ codesign --verify "${app_path}"
 echo "Archiving and notarizing the signed app..."
 
 ditto -ck --keepParent "${app_path}" "${archive_path}"
-xcrun notarytool submit "${archive_path}" --apple-id ${apple_dev_id} --team-id ${apple_dev_team_id} --password ${apple_dev_password} --wait
+xcrun notarytool submit "${archive_path}" --apple-id ${apple_dev_id} --team-id ${apple_dev_team_id} --password ${apple_dev_password} --wait || { exit 1; }
 
 echo "Stapling the notarization ticket to the signed app..."
 

.github/workflows/export-project.yml

@@ -14,7 +14,7 @@ concurrency:
 
 env:
   GODOT_VERSION: "4.3.0-stable"
-  GDSION_VERSION: "0.7-beta6"
+  GDSION_VERSION: "0.7-beta7"
 
 jobs:
   export-publish: