Release Info

Changelog

Embedded entitlements XML is now used when estimating the size of signatures.
Previously, this data could cause us to not reserve enough space for the
signature, causing signing to fail. (#32, #40)
Bundle stapling is now capable of stapling any bundle with a main executable,
not just app bundles with a main executable. (#41)
The smartcard-scan, smartcard-generate-key, and smartcard-import
commons are now always present, even when compiled without the smartcard
crate feature enabled. The commands will error at runtime if smartcard support
is not enabled.
Minimum supported Rust version changed from 1.61.0 to 1.62.1.
Changed handling of code requirements around bundle signing to hopefully fix
the sealed resource directory is invalid errors. This should hopefully
enable signing adhoc app bundles with frameworks. Before, if a Mach-O inside
a bundle contained no designated requirements, no designated requirements
were emitted. After, designated requirements are derived automatically from
the digests of code directories in Mach-O binaries. Additionally, an empty
designated requirements blob can be emitted. (#44)
Shallow framework bundles are now properly recognized as such. This fixes
a common issue with signing iOS bundles. (#46)