macos: build with Python 3.9.1

.github/workflows/package.yml

@@ -30,7 +30,7 @@ jobs:
     env:
       DISCID_VERSION: 0.6.2
       FPCALC_VERSION: 1.5.0
-      PYTHON_VERSION: 3.7.6
+      PYTHON_VERSION: 3.9.1
       MACOSX_DEPLOYMENT_TARGET: ${{ matrix.macos-deployment-version }}
     steps:
     - uses: actions/checkout@v2

requirements-build.txt

@@ -1,3 +1,3 @@
 Babel==2.6
-PyInstaller==4.0
+PyInstaller==4.1
 setuptools<45.0.0

scripts/package/macos-package-app.sh

@@ -54,7 +54,7 @@ mv "$APP_BUNDLE.tmp" "$APP_BUNDLE"
 if [ "$CODESIGN" = '1' ]; then
     # Enable hardened runtime if app will get notarized
     if [ "$NOTARIZE" = "1" ]; then
-      codesign --verbose --deep \
+      codesign --verbose --deep --force \
         --options runtime \
         --entitlements ../scripts/package/entitlements.plist \
         --keychain "$KEYCHAIN_PATH" --sign "$CERTIFICATE_NAME" \
@@ -62,7 +62,7 @@ if [ "$CODESIGN" = '1' ]; then
       ../scripts/package/macos-notarize-app.sh "$APP_BUNDLE"
       codesign --verbose --deep --verbose --strict=all --check-notarization "$APP_BUNDLE"
     else
-      codesign --verify --verbose --deep \
+      codesign --verify --verbose --deep --force \
         --keychain "$KEYCHAIN_PATH" --sign "$CERTIFICATE_NAME" \
         "$APP_BUNDLE"
     fi