AltForge v2.4.1

Full Changelog: v2.4.0...v2.4.1

AltForge v2.4.0

Important

This build replaces the previous v2.4.0 assets after physical-device reports showed a second native crash while signing a third-party IPA. Install build 17 before validating the fix.

Changes

• Prevents AltSign from constructing C++ strings from missing embedded-bundle entitlements, invalid UTF-8, or unrepresentable file-system paths; these cases now return structured signing errors instead of terminating AltForge.
• Removes unsupported top-level Apple Watch companion content from the temporary iPhone signing copy. The original IPA is not modified.
• Records a bounded, sanitized signing checkpoint containing the latest relative bundle, executable, and CPU architecture, while retaining the earlier authentication and provisioning stages.
• Adds release regression tests for Apple Watch component removal and signing-detail sanitization.
• Retains the Simplified Chinese, live theme, branding, authentication guidance, My Apps stability, and AltForge Server improvements included in the earlier v2.4.0 rebuilds.

CI Verification

Release workflow run 31575486165 completed the prepare, Apple, Windows, and publish jobs. It validated the release contracts and ldid architecture compatibility, ran the selected iOS regressions on a task-owned Simulator, built and verified the unsigned IPA and Universal macOS DMG, built the Windows ZIP, replaced all nine Release assets, then downloaded the published assets and verified SHA256SUMS.txt.

The current IPA is 2.4.0 (17), size 23,010,773 bytes. Its SHA-256 is b446a08e42e365829cb0a7a1877d73af67260eb61ec1171ad5e35cbb5b13a244, matching apps.json, SHA256SUMS.txt, and the GitHub asset digest.

Required Device Validation

• Overwrite the existing AltForge installation through AltForge Server; do not delete it unless local data loss is acceptable.
• Retry the same trusted third-party IPA that previously stopped at 正在签名 App.
• Confirm signing continues into sending and device installation, or returns a structured error without terminating AltForge.
• If it still fails, copy the diagnostic report. It should now include the latest sanitized signing object and architecture without credentials, device/team/Server identifiers, certificates, profiles, or absolute paths.

Distribution Limits

The simulator and CI regressions pass, but the same WeChat IPA still requires physical-device end-to-end confirmation. The IPA is unsigned and is signed by AltForge Server for the selected account and device. The macOS DMG is not Developer ID signed or notarized. The Windows ZIP is unsigned.

Full Changelog: 50fc006...v2.4.0