diff --git a/.github/macos-installer/conclusion.html b/.github/macos-installer/conclusion.html
index 9af15bc..00b5c46 100644
--- a/.github/macos-installer/conclusion.html
+++ b/.github/macos-installer/conclusion.html
@@ -3,30 +3,37 @@
 <head>
 <meta charset="utf-8"/>
 <style>
+  :root {
+    color-scheme: light dark;
+    --code-bg: rgba(0, 0, 0, 0.07);
+  }
+  @media (prefers-color-scheme: dark) {
+    :root { --code-bg: rgba(255, 255, 255, 0.12); }
+  }
   body {
     font-family: -apple-system, Helvetica Neue, sans-serif;
     font-size: 13px;
-    color: #1d1d1f;
+    color: -apple-system-label;
     margin: 20px 24px;
     line-height: 1.5;
   }
   h2 { font-size: 17px; font-weight: 600; margin: 0 0 10px; }
   p  { margin: 0 0 10px; }
   code {
-    background: #f2f2f7;
+    background: var(--code-bg);
     border-radius: 4px;
     padding: 1px 5px;
     font-size: 12px;
     font-family: "SF Mono", Menlo, monospace;
   }
   pre {
-    background: #f2f2f7;
+    background: var(--code-bg);
     border-radius: 6px;
     padding: 10px 12px;
     font-size: 12px;
     font-family: "SF Mono", Menlo, monospace;
   }
-  a { color: #0066cc; }
+  a { color: -apple-system-blue; }
 </style>
 </head>
 <body>
diff --git a/.github/macos-installer/readme.html b/.github/macos-installer/readme.html
index 045751b..25fd23e 100644
--- a/.github/macos-installer/readme.html
+++ b/.github/macos-installer/readme.html
@@ -3,10 +3,17 @@
 <head>
 <meta charset="utf-8"/>
 <style>
+  :root {
+    color-scheme: light dark;
+    --code-bg: rgba(0, 0, 0, 0.07);
+  }
+  @media (prefers-color-scheme: dark) {
+    :root { --code-bg: rgba(255, 255, 255, 0.12); }
+  }
   body {
     font-family: -apple-system, Helvetica Neue, sans-serif;
     font-size: 13px;
-    color: #1d1d1f;
+    color: -apple-system-label;
     margin: 20px 24px;
     line-height: 1.5;
   }
@@ -16,21 +23,21 @@
   ul { margin: 0 0 10px; padding-left: 20px; }
   li { margin-bottom: 4px; }
   code {
-    background: #f2f2f7;
+    background: var(--code-bg);
     border-radius: 4px;
     padding: 1px 5px;
     font-size: 12px;
     font-family: "SF Mono", Menlo, monospace;
   }
   pre {
-    background: #f2f2f7;
+    background: var(--code-bg);
     border-radius: 6px;
     padding: 10px 12px;
     font-size: 12px;
     font-family: "SF Mono", Menlo, monospace;
     overflow-x: auto;
   }
-  a { color: #0066cc; }
+  a { color: -apple-system-blue; }
 </style>
 </head>
 <body>
diff --git a/.github/macos-installer/welcome.html b/.github/macos-installer/welcome.html
index 0818329..cb1b3fe 100644
--- a/.github/macos-installer/welcome.html
+++ b/.github/macos-installer/welcome.html
@@ -3,10 +3,17 @@
 <head>
 <meta charset="utf-8"/>
 <style>
+  :root {
+    color-scheme: light dark;
+    --code-bg: rgba(0, 0, 0, 0.07);
+  }
+  @media (prefers-color-scheme: dark) {
+    :root { --code-bg: rgba(255, 255, 255, 0.12); }
+  }
   body {
     font-family: -apple-system, Helvetica Neue, sans-serif;
     font-size: 13px;
-    color: #1d1d1f;
+    color: -apple-system-label;
     margin: 20px 24px;
     line-height: 1.5;
   }
@@ -15,7 +22,7 @@
   ul { margin: 0 0 10px; padding-left: 20px; }
   li { margin-bottom: 4px; }
   code {
-    background: #f2f2f7;
+    background: var(--code-bg);
     border-radius: 4px;
     padding: 1px 5px;
     font-size: 12px;
diff --git a/.github/windows-installer.nsi b/.github/windows-installer.nsi
index 59a7de7..d169b96 100644
--- a/.github/windows-installer.nsi
+++ b/.github/windows-installer.nsi
@@ -2,7 +2,7 @@
 ; Built by the release workflow; __APP_VERSION__ is substituted at compile time.
 ;
 ; Uses NSIS Modern UI 2 (bundled with NSIS — no external plugins required).
-; Wizard pages: Welcome → Read Me → Directory → Installing → Finish
+; Wizard pages: Welcome → Directory → Installing → Finish
 
 Unicode true
 SetCompressor /SOLID lzma
@@ -35,8 +35,9 @@ SetCompressor /SOLID lzma
 !define MUI_FINISHPAGE_NOREBOOTSUPPORT
 
 ; ── Installer Pages ──────────────────────────────────────────────────────────
+; MUI2 valid installer pages: WELCOME, LICENSE, COMPONENTS, DIRECTORY,
+; STARTMENU, INSTFILES, FINISH. MUI_PAGE_README does not exist in MUI2.
 !insertmacro MUI_PAGE_WELCOME
-!insertmacro MUI_PAGE_README     "readme.txt"    ; generated by workflow at build time
 !insertmacro MUI_PAGE_DIRECTORY
 !insertmacro MUI_PAGE_INSTFILES
 !insertmacro MUI_PAGE_FINISH
diff --git a/.github/windows-installer/readme.txt b/.github/windows-installer/readme.txt
deleted file mode 100644
index 6e284a4..0000000
--- a/.github/windows-installer/readme.txt
+++ /dev/null
@@ -1,26 +0,0 @@
-DeepDiff DB - Quick Start
-=========================
-
-After installation, open a new Command Prompt or PowerShell window and run:
-
-    deepdiffdb --version
-
-Create a config file:
-
-    deepdiffdb init
-
-Run your first diff:
-
-    deepdiffdb diff --html
-
-Supported Databases
--------------------
-  MySQL, PostgreSQL, SQLite, Microsoft SQL Server, Oracle Database
-
-Documentation
--------------
-  https://iamvirul.github.io/deepdiff-db/
-
-Source Code
------------
-  https://github.com/iamvirul/deepdiff-db
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0b72b95..92d5f20 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -85,10 +85,9 @@ jobs:
       - name: Build .pkg installer
         run: |
           VERSION="${GITHUB_REF_NAME}"
-          VER_CLEAN="${VERSION#v}"   # v1.4.1 → 1.4.1
+          VER_CLEAN="${VERSION#v}"   # v1.4.2 → 1.4.2
           ARCH="${{ matrix.arch }}"
           PKG_NAME="deepdiff-db-${VERSION}-darwin-${ARCH}.pkg"
-          DMG_NAME="deepdiff-db-${VERSION}-darwin-${ARCH}.dmg"
 
           # ── 1. Payload: mirrors the install layout on the target volume ──
           #    pkgbuild --install-location / means pkg-payload/ is the root.
@@ -123,8 +122,77 @@ jobs:
             --package-path . \
             "${PKG_NAME}"
 
-          # ── 5. Wrap the .pkg in a DMG for a familiar download experience ─
-          #    Users mount the DMG → double-click the .pkg → wizard launches.
+          echo "PKG_NAME=${PKG_NAME}" >> "$GITHUB_ENV"
+          echo "VERSION=${VERSION}"   >> "$GITHUB_ENV"
+
+      - name: Sign .pkg with Developer ID
+        # Requires secrets: MACOS_CERTIFICATE (base64 .p12), MACOS_CERTIFICATE_PWD,
+        # MACOS_KEYCHAIN_PWD, MACOS_IDENTITY ("Developer ID Installer: Name (TEAMID)").
+        # Skipped gracefully when secrets are not configured.
+        env:
+          MACOS_CERTIFICATE:     ${{ secrets.MACOS_CERTIFICATE }}
+          MACOS_CERTIFICATE_PWD: ${{ secrets.MACOS_CERTIFICATE_PWD }}
+          MACOS_KEYCHAIN_PWD:    ${{ secrets.MACOS_KEYCHAIN_PWD }}
+          MACOS_IDENTITY:        ${{ secrets.MACOS_IDENTITY }}
+        run: |
+          if [ -z "${MACOS_CERTIFICATE}" ]; then
+            echo "⚠️  MACOS_CERTIFICATE not set — skipping code signing."
+            echo "    Users will see a Gatekeeper warning on first open."
+            exit 0
+          fi
+
+          # Import the Developer ID Installer certificate into a temporary keychain
+          echo "${MACOS_CERTIFICATE}" | base64 --decode > certificate.p12
+          security create-keychain -p "${MACOS_KEYCHAIN_PWD}" build.keychain
+          security default-keychain -s build.keychain
+          security unlock-keychain -p "${MACOS_KEYCHAIN_PWD}" build.keychain
+          security set-keychain-settings -t 3600 -u build.keychain
+          security import certificate.p12 \
+            -k build.keychain \
+            -P "${MACOS_CERTIFICATE_PWD}" \
+            -T /usr/bin/productsign
+          security set-key-partition-list \
+            -S apple-tool:,apple: -s -k "${MACOS_KEYCHAIN_PWD}" build.keychain
+
+          # Sign the distribution package
+          productsign \
+            --sign "${MACOS_IDENTITY}" \
+            "${PKG_NAME}" \
+            "${PKG_NAME}-signed.pkg"
+          mv "${PKG_NAME}-signed.pkg" "${PKG_NAME}"
+
+          # Clean up keychain and certificate
+          security delete-keychain build.keychain
+          rm -f certificate.p12
+
+      - name: Notarize and staple .pkg
+        # Requires secrets: MACOS_NOTARIZATION_APPLE_ID, MACOS_NOTARIZATION_TEAM_ID,
+        # MACOS_NOTARIZATION_PWD (app-specific password).
+        # Skipped gracefully when secrets are not configured.
+        env:
+          MACOS_NOTARIZATION_APPLE_ID: ${{ secrets.MACOS_NOTARIZATION_APPLE_ID }}
+          MACOS_NOTARIZATION_TEAM_ID:  ${{ secrets.MACOS_NOTARIZATION_TEAM_ID }}
+          MACOS_NOTARIZATION_PWD:      ${{ secrets.MACOS_NOTARIZATION_PWD }}
+        run: |
+          if [ -z "${MACOS_NOTARIZATION_APPLE_ID}" ] || \
+             [ -z "${MACOS_NOTARIZATION_TEAM_ID}" ] || \
+             [ -z "${MACOS_NOTARIZATION_PWD}" ]; then
+            echo "⚠️  One or more notarization secrets are missing — skipping notarization."
+            exit 0
+          fi
+
+          xcrun notarytool submit "${PKG_NAME}" \
+            --apple-id  "${MACOS_NOTARIZATION_APPLE_ID}" \
+            --team-id   "${MACOS_NOTARIZATION_TEAM_ID}" \
+            --password  "${MACOS_NOTARIZATION_PWD}" \
+            --wait
+
+          # Staple the notarization ticket so Gatekeeper works offline
+          xcrun stapler staple "${PKG_NAME}"
+
+      - name: Wrap .pkg in DMG
+        run: |
+          DMG_NAME="${PKG_NAME%.pkg}.dmg"
           mkdir -p dmg-stage
           cp "${PKG_NAME}" dmg-stage/
 
@@ -189,10 +257,6 @@ jobs:
           sed "s/__APP_VERSION__/${VER_CLEAN}/g" \
             .github/windows-installer.nsi > installer.nsi
 
-          # MUI2 README page — copy the static file tracked in the repo.
-          # Avoids inline heredocs which are error-prone inside YAML run blocks.
-          cp .github/windows-installer/readme.txt readme.txt
-
           echo "INSTALLER_NAME=deepdiff-db-${VERSION}-windows-amd64-installer.exe" \
             >> "$GITHUB_ENV"
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 236188e..2e8110e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.4.3] - 2026-05-03
+
+### Added
+
+- **macOS code signing and notarization** — Release workflow now signs the `.pkg` with a Developer ID Installer certificate (`productsign`) and notarizes it with Apple (`notarytool --wait` + `stapler staple`). Both steps are skipped gracefully when the required secrets are not configured so builds still succeed without an Apple Developer account. Eliminates the Gatekeeper "unrecognized developer" warning on first open.
+
+### Fixed
+
+- **Windows installer `MUI_PAGE_README` macro not found** — `MUI_PAGE_README` does not exist in NSIS MUI2. Removed the non-existent page; the wizard now flows Welcome → Directory → Installing → Finish. ([#117](https://github.com/iamvirul/deepdiff-db/pull/117))
+- **macOS installer HTML broken in dark mode** — `<code>` and `<pre>` elements used a hardcoded light-gray background (`#f2f2f7`) that rendered as a visual highlight artifact in macOS dark mode. Replaced with an adaptive `rgba` CSS custom property that works in both light and dark appearances.
+- **Release workflow YAML syntax error on L184** — Inline heredoc (`<< 'EOF'`) inside a `run: |` block caused a YAML parse error. Moved the content to a static file in the repo and replaced the heredoc with a `cp` call.
+
 ## [1.4.2] - 2026-05-03
 
 ### Added
@@ -500,7 +512,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - PostgreSQL schema-aware queries
 - MySQL foreign key check handling
 
-[Unreleased]: https://github.com/iamvirul/deepdiff-db/compare/v1.4.2...HEAD
+[Unreleased]: https://github.com/iamvirul/deepdiff-db/compare/v1.4.3...HEAD
+[1.4.3]: https://github.com/iamvirul/deepdiff-db/compare/v1.4.2...v1.4.3
 [1.4.2]: https://github.com/iamvirul/deepdiff-db/compare/v1.4.1...v1.4.2
 [1.4.1]: https://github.com/iamvirul/deepdiff-db/compare/v1.4.0...v1.4.1
 [1.4.0]: https://github.com/iamvirul/deepdiff-db/compare/v1.3.0...v1.4.0
