fix(release): notarize apple dylib extensions

Author: Gioee

.github/workflows/main.yml

@@ -278,9 +278,13 @@ jobs:
           security import certificate.p12 -k build.keychain -P "${{ secrets.CERTIFICATE_PASSWORD }}" -T /usr/bin/codesign
           security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "${{ secrets.KEYCHAIN_PASSWORD }}" build.keychain
 
-      - name: codesign dylib
+      - name: codesign and notarize dylib
         if: matrix.os == 'macos-15' && matrix.name != 'apple-xcframework'
-        run: codesign --sign "${{ secrets.APPLE_TEAM_ID }}" --timestamp --options runtime dist/ai.dylib
+        run: |
+          codesign --sign "${{ secrets.APPLE_TEAM_ID }}" --timestamp --options runtime dist/ai.dylib
+          ditto -c -k dist/ai.dylib dist/ai.zip
+          xcrun notarytool submit dist/ai.zip --apple-id "${{ secrets.APPLE_ID }}" --password "${{ secrets.APPLE_PASSWORD }}" --team-id "${{ secrets.APPLE_TEAM_ID }}" --wait
+          rm dist/ai.zip
 
       - name: codesign and notarize xcframework
         if: matrix.name == 'apple-xcframework'