feat(electron-service): v10.0.0

.github/workflows/_ci-build-tauri-apps.reusable.yml

@@ -61,14 +61,32 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
 
       # Install Tauri dependencies on Linux
+      - name: 🔧 Fix ARM64 Package Sources (Linux)
+        if: runner.os == 'Linux' && runner.arch == 'ARM64'
+        shell: bash
+        run: |
+          echo "Fixing ARM64 package sources for Ubuntu..."
+          # Add proper arm64 sources for jammy
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy main restricted universe multiverse" | sudo tee /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-updates main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-backports main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-security main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+
+          # Ensure default sources only use amd64
+          sudo sed -i -e 's/^deb http/deb [arch=amd64] http/' /etc/apt/sources.list
+          sudo sed -i -e 's/^deb mirror/deb [arch=amd64] mirror/' /etc/apt/sources.list
+
+          sudo apt-get update
+
       - name: 🦀 Install Tauri Dependencies (Linux)
         if: runner.os == 'Linux'
         shell: bash
         run: |
           echo "Installing Tauri dependencies for Linux..."
-          sudo tee -a /etc/apt/sources.list > /dev/null <<EOT
-          deb http://archive.ubuntu.com/ubuntu jammy main universe
-          EOT
+          # Only add archive.ubuntu.com for amd64, arm64 sources are handled above
+          if [ "$(uname -m)" != "aarch64" ]; then
+            echo "deb http://archive.ubuntu.com/ubuntu jammy main universe" | sudo tee -a /etc/apt/sources.list > /dev/null
+          fi
           sudo apt-get update
           # Install build dependencies only (no runtime libraries needed for compilation)
           sudo apt-get install -y \

.github/workflows/_ci-build-tauri-e2e-app.reusable.yml

@@ -65,14 +65,32 @@ jobs:
       - name: 🦀 Install Rust Toolchain
         uses: dtolnay/rust-toolchain@stable
 
+      - name: 🔧 Fix ARM64 Package Sources (Linux)
+        if: runner.os == 'Linux' && runner.arch == 'ARM64'
+        shell: bash
+        run: |
+          echo "Fixing ARM64 package sources for Ubuntu..."
+          # Add proper arm64 sources for jammy
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy main restricted universe multiverse" | sudo tee /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-updates main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-backports main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-security main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+
+          # Ensure default sources only use amd64
+          sudo sed -i -e 's/^deb http/deb [arch=amd64] http/' /etc/apt/sources.list
+          sudo sed -i -e 's/^deb mirror/deb [arch=amd64] mirror/' /etc/apt/sources.list
+
+          sudo apt-get update
+
       - name: 🦀 Install Tauri Dependencies (Linux)
         if: runner.os == 'Linux'
         shell: bash
         run: |
           echo "Installing Tauri dependencies for Linux..."
-          sudo tee -a /etc/apt/sources.list > /dev/null <<EOT
-          deb http://archive.ubuntu.com/ubuntu jammy main universe
-          EOT
+          # Only add archive.ubuntu.com for amd64, arm64 sources are handled above
+          if [ "$(uname -m)" != "aarch64" ]; then
+            echo "deb http://archive.ubuntu.com/ubuntu jammy main universe" | sudo tee -a /etc/apt/sources.list > /dev/null
+          fi
           sudo apt-get update
           sudo apt-get install -y \
             build-essential \

.github/workflows/_ci-build-tauri-package-app.reusable.yml

@@ -53,14 +53,32 @@ jobs:
       - name: 🦀 Install Rust Toolchain
         uses: dtolnay/rust-toolchain@stable
 
+      - name: 🔧 Fix ARM64 Package Sources (Linux)
+        if: runner.os == 'Linux' && runner.arch == 'ARM64'
+        shell: bash
+        run: |
+          echo "Fixing ARM64 package sources for Ubuntu..."
+          # Add proper arm64 sources for jammy
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy main restricted universe multiverse" | sudo tee /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-updates main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-backports main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-security main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+
+          # Ensure default sources only use amd64
+          sudo sed -i -e 's/^deb http/deb [arch=amd64] http/' /etc/apt/sources.list
+          sudo sed -i -e 's/^deb mirror/deb [arch=amd64] mirror/' /etc/apt/sources.list
+
+          sudo apt-get update
+
       - name: 🦀 Install Tauri Dependencies (Linux)
         if: runner.os == 'Linux'
         shell: bash
         run: |
           echo "Installing Tauri dependencies for Linux..."
-          sudo tee -a /etc/apt/sources.list > /dev/null <<EOT
-          deb http://archive.ubuntu.com/ubuntu jammy main universe
-          EOT
+          # Only add archive.ubuntu.com for amd64, arm64 sources are handled above
+          if [ "$(uname -m)" != "aarch64" ]; then
+            echo "deb http://archive.ubuntu.com/ubuntu jammy main universe" | sudo tee -a /etc/apt/sources.list > /dev/null
+          fi
           sudo apt-get update
           sudo apt-get install -y \
             build-essential \
@@ -324,8 +342,8 @@ jobs:
         id: upload-archive
         uses: ./.github/workflows/actions/upload-archive
         with:
-          name: tauri-package-app-${{ runner.os }}
-          output: tauri-package-app-${{ runner.os }}/artifact.zip
+          name: tauri-package-app-${{ runner.os }}-${{ runner.arch == 'ARM64' && 'ARM64' || 'x64' }}
+          output: tauri-package-app-${{ runner.os }}-${{ runner.arch == 'ARM64' && 'ARM64' || 'x64' }}/artifact.zip
           paths: fixtures/package-tests/tauri-app/src-tauri/target
           cache_key_prefix: tauri-package-app
           retention_days: '90'

.github/workflows/_ci-e2e-tauri.reusable.yml

@@ -77,14 +77,32 @@ jobs:
       # Install Tauri runtime dependencies on Linux (apps are pre-built, only need runtime libs)
       # Minimum requirements per Tauri docs: libwebkit2gtk-4.1-0, libgtk-3-0, libappindicator3-1
       # Additional libraries may be pulled in as transitive dependencies
+      - name: 🔧 Fix ARM64 Package Sources (Linux)
+        if: runner.os == 'Linux' && runner.arch == 'ARM64'
+        shell: bash
+        run: |
+          echo "Fixing ARM64 package sources for Ubuntu..."
+          # Add proper arm64 sources for jammy
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy main restricted universe multiverse" | sudo tee /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-updates main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-backports main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+          echo "deb [arch=arm64] http://ports.ubuntu.com/ubuntu-ports/ jammy-security main restricted universe multiverse" | sudo tee -a /etc/apt/sources.list.d/arm64-jammy.list > /dev/null
+
+          # Ensure default sources only use amd64
+          sudo sed -i -e 's/^deb http/deb [arch=amd64] http/' /etc/apt/sources.list
+          sudo sed -i -e 's/^deb mirror/deb [arch=amd64] mirror/' /etc/apt/sources.list
+
+          sudo apt-get update
+
       - name: 🦀 Install Tauri Runtime Dependencies (Linux)
         if: runner.os == 'Linux'
         shell: bash
         run: |
           echo "Installing Tauri runtime dependencies for Linux..."
-          sudo tee -a /etc/apt/sources.list > /dev/null <<EOT
-          deb http://archive.ubuntu.com/ubuntu jammy main universe
-          EOT
+          # Only add archive.ubuntu.com for amd64, arm64 sources are handled above
+          if [ "$(uname -m)" != "aarch64" ]; then
+            echo "deb http://archive.ubuntu.com/ubuntu jammy main universe" | sudo tee -a /etc/apt/sources.list > /dev/null
+          fi
           sudo apt-get update
           sudo apt-get --fix-broken install -y || true
 

.github/workflows/_ci-e2e.reusable.yml

@@ -103,6 +103,81 @@ jobs:
         shell: bash
         run: pnpm exec turbo run ${{ inputs.build-command }} ${{ steps.gen-build.outputs.result }} --only --parallel
 
+      # Setup protocol handlers for deeplink testing
+      # Required for Windows and Linux to properly handle testapp:// protocol
+      - name: 🔗 Setup Protocol Handlers
+        if: contains(inputs.scenario, 'builder') || contains(inputs.scenario, 'forge')
+        shell: bash
+        run: |
+          echo "=== Protocol Handler Setup ==="
+          echo "Runner OS: $RUNNER_OS"
+          echo "Working directory: $(pwd)"
+          echo "Scenario: ${{ inputs.scenario }}"
+          echo ""
+
+          # Determine which app(s) to set up based on scenario
+          APPS=()
+          if [[ "${{ inputs.scenario }}" == *"builder"* ]]; then
+            APPS+=("electron-builder")
+          fi
+          if [[ "${{ inputs.scenario }}" == *"forge"* ]]; then
+            APPS+=("electron-forge")
+          fi
+
+          for APP in "${APPS[@]}"; do
+            echo "Setting up protocol handler for: $APP"
+
+            if [ "$RUNNER_OS" == "Windows" ]; then
+              echo "Setting up Windows protocol handler..."
+
+              if [ "$APP" == "electron-builder" ]; then
+                echo "Checking if dist directory exists..."
+                ls -la ./fixtures/e2e-apps/$APP/dist/ || echo "dist/ not found"
+              else
+                echo "Checking if out directory exists..."
+                ls -la ./fixtures/e2e-apps/$APP/out/ || echo "out/ not found"
+              fi
+              echo ""
+
+              powershell -ExecutionPolicy Bypass -File ./fixtures/e2e-apps/$APP/scripts/setup-protocol-handler.ps1
+              EXIT_CODE=$?
+
+              if [ $EXIT_CODE -ne 0 ]; then
+                echo "Error: Protocol handler setup failed for $APP with exit code $EXIT_CODE"
+                exit 1
+              fi
+
+            elif [ "$RUNNER_OS" == "Linux" ]; then
+              echo "Setting up Linux protocol handler..."
+
+              if [ "$APP" == "electron-builder" ]; then
+                echo "Checking if dist directory exists..."
+                ls -la ./fixtures/e2e-apps/$APP/dist/ || echo "dist/ not found"
+              else
+                echo "Checking if out directory exists..."
+                ls -la ./fixtures/e2e-apps/$APP/out/ || echo "out/ not found"
+              fi
+              echo ""
+
+              chmod +x ./fixtures/e2e-apps/$APP/scripts/setup-protocol-handler.sh
+              ./fixtures/e2e-apps/$APP/scripts/setup-protocol-handler.sh
+              EXIT_CODE=$?
+
+              if [ $EXIT_CODE -ne 0 ]; then
+                echo "Error: Protocol handler setup failed for $APP with exit code $EXIT_CODE"
+                exit 1
+              fi
+
+            else
+              echo "macOS: Protocol handlers are registered by the app itself via setAsDefaultProtocolClient"
+              echo "No external setup needed - the app registers on first launch"
+            fi
+
+            echo ""
+          done
+
+          echo "=== Protocol Handler Setup Complete ==="
+
       # Dynamically generate the test commands to run
       # This handles both single and multiple scenarios
       - name: 🪄 Generate Test Execution Plan

.github/workflows/_ci-package.reusable.yml

@@ -97,8 +97,8 @@ jobs:
         if: inputs.service == 'tauri' || inputs.service == 'both'
         uses: ./.github/workflows/actions/download-archive
         with:
-          name: tauri-package-app-${{ runner.os }}
-          path: tauri-package-app-${{ runner.os }}
+          name: tauri-package-app-${{ runner.os }}-${{ runner.arch == 'ARM64' && 'ARM64' || 'x64' }}
+          path: tauri-package-app-${{ runner.os }}-${{ runner.arch == 'ARM64' && 'ARM64' || 'x64' }}
           filename: artifact.zip
           cache_key_prefix: tauri-package-app
           exact_cache_key: ${{ inputs.tauri_cache_key || '' }}
@@ -190,15 +190,27 @@ jobs:
                   xvfb-run -a pnpm run test:package:tauri -- --skip-build
                 else
                   pnpm run test:package:tauri -- --skip-build
-                fi
               fi
+            fi
               ;;
             *)
               echo "Invalid service: ${{ inputs.service }}"
               exit 1
               ;;
           esac
 
+      # Upload logs as artifacts for later analysis (same as E2E tests)
+      # This helps debug issues without cluttering the GitHub Actions console
+      - name: 📦 Upload Package Test Logs
+        if: always()
+        continue-on-error: true
+        uses: actions/upload-artifact@v4
+        with:
+          name: package-test-logs-${{ inputs.os }}-${{ inputs.service }}-${{ inputs.module-type || 'default' }}-${{ github.run_id }}-${{ github.run_attempt }}
+          path: logs/package-tests/*.log
+          retention-days: 90
+          if-no-files-found: warn
+
       # Provide an interactive debugging session on failure
       # This allows manual investigation of the environment
       - name: 🐛 Debug Build on Failure

.github/workflows/_release-prepare.reusable.yml

@@ -81,12 +81,10 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '24'
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.26.2
 
       - name: Calculate version information
         id: calculate_versions

.github/workflows/_release-publish.reusable.yml

@@ -56,6 +56,7 @@ on:
       github_bot_token:
         description: 'GitHub token for authentication'
         required: true
+      # npm_token removed - now using OIDC trusted publishing
       deploy_key:
         description: 'SSH deploy key for pushing to the repository'
         required: true
@@ -73,6 +74,9 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write  # Required for OIDC trusted publishing
+      contents: write  # Required for pushing commits and tags
     outputs:
       service_release_tag: ${{ steps.collect_tags.outputs.service_release_tag }}
       shared_release_tags: ${{ steps.collect_tags.outputs.shared_release_tags }}
@@ -88,12 +92,10 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '24'
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
-        with:
-          version: 10.26.2
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
@@ -124,11 +126,15 @@ jobs:
         if: ${{ !inputs.dry_run }}
         run: |
           pnpm config set registry "https://registry.npmjs.org/"
+          # Note: Authentication now handled via OIDC trusted publishing
+          # No token configuration needed - npm will use OIDC tokens automatically
 
       - name: Configure Git
         run: |
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
+          # Configure git to use token authentication for pushes
+          git remote set-url origin https://x-access-token:${{ secrets.github_bot_token }}@github.com/webdriverio/desktop-mobile-testing.git
 
       # PHASE 1: Version shared packages (if changed) with their specific bump types
       - name: Version shared packages