[krishhgg]

Phase 1 of the testing plan: CI tests on every macOS major GitHub hosts, and long test runs get time to finish.

What changes

• macOS 27 job. The Swift job runs on macos-26 and on xcode-27, GitHub's macOS 27 image (public preview). Both are normal jobs: a failure on either fails the run. The first commit marked the macOS 27 job continue-on-error. The last commit drops that, because the whole suite passes on macOS 27 today. The known macOS 27 bugs (Hold-to-end control opens extension fields instead of ending session #60's clicks, the powermode output, the display gate) need real hardware or the menu bar UI, so this job doesn't catch them.
• Versions in the job summary. Each job writes the macOS version and build, Xcode, Swift and runner image it used. GitHub picks the point release and moves it forward. On 2026-10-11 macos-26 was macOS 26.6.2 (25G83), the build from Sleep guard: fail the start when macOS sets SleepDisabled back to 0 #77's report, and xcode-27 was macOS 27.0.1 (26A434), the version from Hold-to-end control opens extension fields instead of ending session #60's report.
• Time limits. The job timeout goes from 30 to 60 minutes and the test watchdog from 20 to 50. Install, uninstall: identify a running Insomnia by path or bundle id, not by name #18 and Sudoers: drop passwordless disablesleep 1; Start asks for the administrator password #32 kept hitting the 20-minute watchdog while RecoveryScriptTests was still making progress. The watchdog's 50 minutes include building the tests.
• actionlint config. actionlint 1.7.12, the version the lint job pins, predates the xcode-27 label and rejects it as unknown. .github/actionlint.yaml lists it, with a note to remove it once a pinned actionlint knows the label.

CI results

Commit	Job	macOS	Xcode	Tests
09baad9	macOS 26	26.6.2 (25G83)	26.6 (17F113)	1223 run, 10 skipped, 0 failed
09baad9	macOS 27	27.0.1 (26A434)	27.0 (27A266a)	1223 run, 10 skipped, 0 failed
d328730	macOS 26	26.6.2 (25G83)	26.6 (17F113)	1223 run, 10 skipped, 0 failed
d328730	macOS 27, attempt 1	27.0.1 (26A434)	27.0 (27A266a)	1 test failed: the fake sudo flake fixed by #89
d328730	macOS 27, attempt 2	27.0.1 (26A434)	27.0 (27A266a)	1223 run, 10 skipped, 0 failed

The 10 skips are UIStatusTests cases that need a non-zero pill stagger. The hosted images have Reduce Motion on, so the stagger is zero. Swift is 6.3.3 on macOS 26 and 6.4 on macOS 27.

The attempt 1 failure was testTheSupervisorOutlivesItsRunAndGroupSignalsAndHoldsTheLockUntilItReapsTheCommand. The test's fake sudo logged each group signal twice. That is a race in the fake, not in the app, and it is on main too. #89 fixes it. Until #89 merges, the macOS 27 job can fail on it now and then, and so can the macOS 26 job.

Checks

• actionlint 1.7.12 passes locally with the new config, and failed on xcode-27 without it.
• zizmor runs in CI. The matrix label reaches the run block through env, not a ${{ }} expression in the script.
• Codex (gpt-6.1-sol, xhigh, read-only) reviewed 09baad9 and found the timeout comment wrong: it left out the build. cac3718 fixes the comment. Codex found nothing at d328730.

CI-only PR: no Mac report needed.

🤖 Generated with Claude Code

Confidence Score: 5/5

The PR appears safe to merge; no blocking issues were found.

Summary

CI runs Swift tests and release builds on both macOS 26 and macOS 27.

• Swift CI checks macOS 26 and 27 in separate 60-minute jobs.
• The Swift test watchdog waits 50 minutes before stopping a run.

_{Reviews (2) · Last reviewed commit: "CI: make the macOS 27 job a normal job" · Reviewed by Greptile}