fix: bundle theia native dependencies with stricter permissions

The Arduino company is no longer soliciting monetary donations. Community members who wish to contribute to the project
still have opportunities to do so via the other options listed here.

.github/workflows/build.yml

@@ -607,7 +607,7 @@ jobs:
           pattern: ${{ env.JOB_TRANSFER_ARTIFACT_PREFIX }}*
 
       - name: Configure AWS Credentials for Nightly [S3]
-        uses: aws-actions/configure-aws-credentials@v5
+        uses: aws-actions/configure-aws-credentials@v4
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           aws-region: us-east-1
@@ -666,7 +666,7 @@ jobs:
 
       - name: Configure AWS Credentials for Release [S3]
         if: needs.build-type-determination.outputs.publish-to-s3 == 'true'
-        uses: aws-actions/configure-aws-credentials@v5
+        uses: aws-actions/configure-aws-credentials@v4
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           aws-region: us-east-1

.github/workflows/compose-full-changelog.yml

@@ -56,7 +56,7 @@ jobs:
           yarn run compose-changelog "${{ github.workspace }}/${{ env.CHANGELOG_ARTIFACTS }}/$CHANGELOG_FILE_NAME"
 
       - name: Configure AWS Credentials for Changelog [S3]
-        uses: aws-actions/configure-aws-credentials@v5
+        uses: aws-actions/configure-aws-credentials@v4
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }} 
           aws-region: us-east-1 

README.md

@@ -46,9 +46,9 @@ See [**the contributor guide**](docs/CONTRIBUTING.md#contributor-guide) for more
 
 See the [**development guide**](docs/development.md) for a technical overview of the application and instructions for building the code.
 
-## Donations
+### Support the project
 
-This open source code was written by the Arduino team and is maintained on a daily basis with the help of the community. We invest a considerable amount of time in development, testing and optimization. Please consider [donating](https://www.arduino.cc/en/donate/) or [sponsoring](https://github.com/sponsors/arduino) to support our work, as well as [buying original Arduino boards](https://store.arduino.cc/) which is the best way to make sure our effort can continue in the long term.
+This open source code was written by the Arduino team and is maintained on a daily basis with the help of the community. We invest a considerable amount of time in development, testing and optimization. Please consider [buying original Arduino boards](https://store.arduino.cc/) to support our work on the project.
 
 ## License
 

docs/CONTRIBUTING.md

@@ -6,22 +6,20 @@ Thanks for your interest in contributing to this project!
 
 There are several ways you can get involved:
 
-| Type of contribution                      | Contribution method                                                              |
+| Type of contribution                      | Contribution method                                              |
-| ----------------------------------------- | -------------------------------------------------------------------------------- |
+| ----------------------------------------- | ---------------------------------------------------------------- |
-| - Support<br/>- Question<br/>- Discussion | Post on the [**Arduino Forum**][forum]                                           |
+| - Support<br/>- Question<br/>- Discussion | Post on the [**Arduino Forum**][forum]                           |
-| - Bug report<br/>- Feature request        | Issue report (see the guide [**here**][issues])                                  |
+| - Bug report<br/>- Feature request        | Issue report (see the guide [**here**][issues])                  |
-| Testing                                   | Beta testing, PR review (see the guide [**here**][beta-testing])                 |
+| Testing                                   | Beta testing, PR review (see the guide [**here**][beta-testing]) |
-| Translation                               | See the guide [**here**][translate]                                              |
+| Translation                               | See the guide [**here**][translate]                              |
-| - Bug fix<br/>- Enhancement               | Pull request (see the guide [**here**][prs])                                     |
+| - Bug fix<br/>- Enhancement               | Pull request (see the guide [**here**][prs])                     |
-| Monetary                                  | - [Donate][donate]<br/>- [Sponsor][sponsor]<br/>- [Buy official products][store] |
+| Monetary                                  | [Buy official products][store]                                   |
 
 [forum]: https://forum.arduino.cc
 [issues]: contributor-guide/issues.md#issue-report-guide
 [beta-testing]: contributor-guide/beta-testing.md#beta-testing-guide
 [translate]: contributor-guide/translation.md#translator-guide
 [prs]: contributor-guide/pull-requests.md#pull-request-guide
-[donate]: https://www.arduino.cc/en/donate/
-[sponsor]: https://github.com/sponsors/arduino
 [store]: https://store.arduino.cc
 
 ## Resources

electron-app/resources/entitlements.mac.plist

@@ -8,7 +8,5 @@
     <true/>
     <key>com.apple.security.cs.disable-library-validation</key>
     <true/>
-    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
-    <true/>
 </dict>
 </plist>

electron-app/webpack.config.js

@@ -1,5 +1,7 @@
 const path = require('node:path');
+const fs = require('fs');
 const webpack = require('webpack');
+const TheiaNativeWebpackPlugin = require('@theia/native-webpack-plugin');
 const frontend = require('./gen-webpack.config');
 const backend = require('./gen-webpack.node.config');
 const {
@@ -39,6 +41,27 @@ backend.config.entry['parcel-watcher'] = {
   },
 };
 
+// Override Theia native dependency bundler to assign stricter file permissions (chmod 755)
+// https://github.com/eclipse-theia/theia/blob/9a52544fb4c1ea1d3d0d6bcbe106b97184279030/dev-packages/native-webpack-plugin/src/native-webpack-plugin.ts#L149
+class NativeWebpackPlugin extends TheiaNativeWebpackPlugin {
+  // Override the method that writes/copies files
+  async copyExecutable(source, target) {
+    const targetDirectory = path.dirname(target);
+    await fs.promises.mkdir(targetDirectory, { recursive: true });
+    await fs.promises.copyFile(source, target);
+    await fs.promises.chmod(target, 0o755);
+  }
+}
+backend.config.plugins.push(new NativeWebpackPlugin({
+  out: 'native',
+  trash: true,
+  ripgrep: true,
+  pty: true,
+  nativeBindings: {
+    drivelist: 'drivelist/build/Release/drivelist.node',
+  },
+}));
+
 // Use a customized backend main that can enable the file logger in bundled mode.
 backend.config.entry['main'] = require.resolve('./arduino-ide-backend-main.js');