Install macOS Updates and Upgrades
The default super workflow only attempts to install the latest non-deferred macOS minor upDATE if they are available.
By configuring additional options, super can also target specific macOS versions, install macOS major upGRADES, and macOS Background Security Improvements (BSI). Also, keep in mind that there are additional non-system and alternate workflow options that can further adjust the super workflow behavior.
The macOS update/upgrade dialog
The macOS update/upgrade restart notification
The super workflow respects built-in system managed software update deferrals. In other words, super does not download or install (but it does report to the super.log) software updates that have been deferred due to managed software update settings that are enforced via MDM configuration profiles. In this case, the super workflow assumes that there is no available update target and will automatically defer based on the --deferral-timer-workflow-relaunch option or the default workflow relaunch time, which is set to 360 minutes (6 hours).
If the workflow target is a macOS minor update (not a macOS major upgrade) and built-in system automatic macOS update downloads are enabled (either locally via System Settings or via MDM configuration profiles), then the super workflow will automatically defer until the system has automatically downloaded the macOS update. In this case, the super workflow will automatically defer based on the --deferral-timer-default option or the default of 60 minutes.
Further, the built-in system automatic macOS update download includes a mandatory incremental rollout mechanism that often prevents the system from downloading the update until a few days after its initial release. In other words, the super workflow may have to wait several days for the system to choose when to automatically download new macOS updates.
Keep in mind, there are several other workflow options that may override this automatic deferral behavior, including the --workflow-install-now option, any scheduled installations, and any pending days deadlines or date deadlines that are within 24 hours of ending.
Limit the installation of macOS minor updates to the version specified in this option.
Command option example:
--install-macos-minor-version-target=26.5.1
Command option disable example:
--install-macos-major-version-target=X
Configuration profile example:
<key>InstallMacOSMinorVersionTarget</key>
<string>26.5.1</string>
With this option enabled, super does not attempt to install any macOS minor updates newer than the targeted version. For example, if you specified --install-macos-minor-version-target=26.5, then super never attempts to install minor updates to macOS 26.6 or newer.
You can specify partial or full macOS numbers. If you don't provide a specific version number (for example, 26.5.1), then super targets the latest available macOS minor update that matches the target.
It's important to recontize that the Apple softwareupdate mechanism can only target the latest non-deferred macOS minor update. As such, targeting an older macOS minor update will likely result in super having to target a full macOS installer. These full installers require more local free storage space and take considerably longer to install.
Finally, because macOS cannot be downgraded without a full system reset, super likewise cannot downgrade macOS systems to older versions even if this option is specified.
Allow super to install macOS major upgrades.
Command option example:
--install-macos-major-upgrades
Command option disable example:
--install-macos-major-upgrades-off
Configuration profile example:
<key>InstallMacOSMajorUpgrades</key>
<true/>
With this option enabled, super leverages built-in commands and the mist-cli command to find compatible macOS major upgrade versions. If a newer macOS major upgrade is available, then super attempts to download and install the upgrade. The default super workflow always targets the newest compatible macOS major upgrade version.
Even if there is no macOS major upgrade available, and you leave this option enabled, super continues to install any available macOS minor updates. In other words, if you enable the --install-macos-major-upgrades option, then super attempts all macOS minor updates and major upgrades throughout time.
Limit the installation of macOS major upgrades to the version specified in this option. This option requires that you have also specified the --install-macos-major-upgrades option.
Command option example:
--install-macos-major-version-target=27.0.1
Command option disable example:
--install-macos-major-version-target=X
Configuration profile example:
<key>InstallMacOSMajorVersionTarget</key>
<string>27.0.1</string>
With this option enabled, super does not attempt to install any macOS major upgrades newer than the targeted version. For example, if you specified --install-macos-major-version-target=26, then super never attempts to install major upgrades to macOS 27 or newer.
You can specify partial or full macOS numbers. If you don't provide a specific version number (for example, 27.0.1), then super targets the latest available macOS major upgrade that matches the target.
It's important to recontize that the Apple softwareupdate mechanism can only target the latest non-deferred macOS major upgrade. As such, targeting an older macOS major upgrade will likely result in super having to target a full macOS installer. These full installers require more local free storage space and take considerably longer to install.
Again, because macOS cannot be downgraded without a full system reset, super likewise cannot downgrade macOS systems to older versions even if this option is specified.
However, even with the option to limit macOS major upgrades enabled, super continues to install any available macOS minor updates. In other words, if you enable the --install-macos-major-version-target=26 option, then super attempts to keep the system up to date with the newest version of macOS 26.
Allow super to install macOS Background Security Improvements (BSI).
Command option example:
--install-macos-bsi-updates
Command option disable example:
--install-macos-bsi-updates-off
Configuration profile example:
<key>InstallMacOSBSIUpdates</key>
<true/>
Even though BSI updates are significantly smaller downloads and install much faster than normal macOS minor updates, they still require a restart to be fully enabled. As such, if this option is enabled, then super macOS BSI update workflows behave similarly to normal macOS minor updates.
When Apple releases a normal macOS minor update that is newer than the previous BSI update, softwareupdate no longer allows for the installation of the previous BSI update. In this case, the super workflow also returns to attempting the newer normal macOS minor update.