The CI is now able to produce valid macOS Ventura bundles (#740)

* rename release workflow

* bump macos runner to macos-12

* bump ubuntu runner to ubuntu 20.04

* add project name env var, even in the `bundle_id`

* rework a bit notarization step

* move the bundle generation to a dedicated step:

This way we can notarize all the bundle and not only the binary.

* use the zip notarized file coming from gon, this requires changes in the installer config

* use this fork (https://github.com/darkvertex/gon/tree/deep_sign_support) to use deep notarization, since this is not yet merged mitchellh/gon#42

* test (move the config.ini) to see if notarization works

* fix zip archive being included in the installer

* github is deprecating `set-output commands`

https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

* forgot "$", special encoding is not needed anymore after 62f7d9d

https://github.com/orgs/community/discussions/35994#discussioncomment-3971397

* fix `unable-to-process-file-command-output-successfully`
https://stackoverflow.com/questions/74137120/how-to-fix-or-avoid-error-unable-to-process-file-command-output-successfully

Author: umbynos

.github/workflows/check-certificates.yml

@@ -26,7 +26,7 @@ jobs:
     if: >
       (github.event_name != 'pull_request' && github.repository == 'arduino/arduino-create-agent') ||
       (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == 'arduino/arduino-create-agent')
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-20.04
 
     strategy:
       fail-fast: false
@@ -109,7 +109,7 @@ jobs:
           echo "Certificate expiration date: $EXPIRATION_DATE"
           echo "Days remaining before expiration: $DAYS_BEFORE_EXPIRATION"
 
-          echo "::set-output name=days::$DAYS_BEFORE_EXPIRATION"
+          echo "days=$DAYS_BEFORE_EXPIRATION" >> $GITHUB_OUTPUT
 
       - name: Check if expiration notification period has been reached
         id: check-expiration

.github/workflows/check-go-dependencies-task.yml

@@ -56,7 +56,7 @@ jobs:
             RESULT="false"
           fi
 
-          echo "::set-output name=result::$RESULT"
+          echo "result=$RESULT" >> $GITHUB_OUTPUT
 
   check-cache:
     needs: run-determination

.github/workflows/check-license.yml

@@ -54,7 +54,7 @@ jobs:
             RESULT="false"
           fi
 
-          echo "::set-output name=result::$RESULT"
+          echo "result=$RESULT" >> $GITHUB_OUTPUT
 
   check-license:
     needs: run-determination

.github/workflows/publish-go-tester-task.yml

@@ -54,7 +54,7 @@ jobs:
             RESULT="false"
           fi
 
-          echo "::set-output name=result::$RESULT"
+          echo "result=$RESULT" >> $GITHUB_OUTPUT
 
   #this job is heavily customized because the build is quite a bit different from other tooling team projects
   build:
@@ -64,7 +64,7 @@ jobs:
     #use the strategy instead because we still use the native build
     strategy:
       matrix:
-        os: [ubuntu-18.04, windows-2019, macos-11]
+        os: [ubuntu-20.04, windows-2019, macos-12]
         arch: [-amd64]
         include:
         - os: windows-2019