New
Apple Codesign 0.25.1
Release Info
Changelog
(The 0.25.0 release had a regression and the release notes for 0.25.0 are folded into this release.)
Unclaimed project
Are you a maintainer of apple-platform-rs? Claim this project to take control of your public changelog and roadmap.
Changelog
Rust crates supporting Apple platform development
Empowering everyone to build reliable and efficient software.
An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.
A modern runtime for JavaScript and TypeScript.
Build smaller, faster, and more secure desktop and mobile applications with a web frontend.
(The 0.25.0 release had a regression and the release notes for 0.25.0 are folded into this release.)
--extra-digest argument has been removed.
--digest can now be specified multiple times. --digest is now a
scoped value.sign --remote-signer argument has been removed. It
is now implicitly assumed via presence of a remote session initialization
argument.--entitlements-xml-file, --code-requirements-file,
--code-resources-file, --code-signature-flags, and --info-plist-file.
The new behavior is much more conservative about which signing settings
can be inherited and prevents unexpected results, such as all binaries
in a bundle sharing the same entitlements or signing flags. Previous signers
of bundles may find various signing settings disappearing from nested
bundles or the non-main Mach-O binary within a bundle. It is highly encouraged
to use the rcodesign diff-signatures command to compare results. If settings
were dropped, add new scoped CLI arguments or use the new configuration
file feature to add settings back in to specific paths.CFBundlePackageType or
CFBundleIdentifier in bundle Info.plist and ignores bundles
lacking these. As a result, we no longer attempt signing of storybook
bundles and other non-signable bundle-looking directories and no
longer likely encounter errors in the process. (#38)--foo-file
instead of using a mix of --foo-path, --foo-filename, and
potentially other variants. The old names are still recognized as
aliases to maintain backwards compatibility.foo1.2.dylib will now resolve to foo1
instead of foo1.2. We still don't use the binary UUID or digest of its
load commands to compute the binary identifier like Apple does.print-signature-info now prints the entitlements plist decoded from DER.
(#75)