Munki 6.6.5 Official Release

This is the official release of Munki 6.6.5: a bug-fix and enhancement release of the Munki tools.

Fixes and enhancements

• Authorized restarts: Wait longer for a response from the authrestartd process so we do not timeout too soon: 41e4a5c
• Client certificate authentication: consider certificate chains when using client certificates for authentication. Thanks to @liamn #1235 and #1236
  A complete list of changes from the 6.6.4 release is here: v6.6.4...v6.6.5

Known issues

Downgrading from 6.6.x to 6.4.2 or earlier

If you install a version of the Munki tools that contains the Python 3.12 framework, and then later attempt to downgrade by installing an older version of the Munki tools (say, 6.4.2.4634) that contains a Python 3.10 (or earlier) framework, /usr/local/munki/munki-python will be broken. See https://github.com/munki/munki/wiki/Downgrading-Munki-tools for more information.

Upgrading Munki with Munki

If you use a technique similar to the one described here to allow Munki to update itself without requiring a restart, be sure to mark the Munki 6.6.x launchd item as an unattended_install. If you don't do that, Munki may not be able to update itself completely without user involvement.
See this post: https://groups.google.com/g/munki-discuss/c/ikIw2mPddM0/m/h95J_DyrCwAJ for more details.

Autopkg recipes here for "munkitools6" have been updated to just install the package as-is, which is the current recommendation.

Additional Information

Build info

The GUI apps and the Python framework were built under Xcode 16.2 on macOS 15.3.1. Builds should work on Xcode 14.3.1 through Xcode 16.2, but these other versions of Xcode have not been tested and may cause different results. (Due to Apple bugs, Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

OS version support

This release should work on macOS 10.13 through macOS 15, though it gets little-to-no testing on versions prior to macOS 13. Please report issues you find with older macOS versions.

Package versioning

• Distribution package version: 6.6.5.4711
• munki core tools version: 6.6.5.4711
• LaunchAgents/LaunchDaemons version: 6.6.0.4656
• Apps package version: 6.6.3.4707
• Python package version: 3.12.2.4689

Attachment info

The munkitools-6.6.5.4711.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart . It should be suitable for most deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases.
The build corresponding to this release is here: https://github.com/macadmins/munki-builds/releases/tag/v6.6.5.4711

Deprecation notes

The following Munki features are considered deprecated and will be removed in a future Munki release:

• Bundled Python: a future release of Munki will remove all dependency on Python and will no longer include a bundled version of Python.
• Installation of Apple software updates. Munki currently does not install Apple updates on Apple silicon, but instead prompts the user to use Apple tools (Settings app; softwareupdate) to do so. A future release will extend this behavior to Intel Macs as well.
• Special support/treatment of Adobe Creative Cloud packages (and other special Adobe installer types). The following installer_types will no longer be supported: AdobeSetup, AdobeUberInstaller, AdobeAcrobatUpdater, AdobeCS5AAMEEPackage, AdobeCS5PatchInstaller, AdobeCCPInstaller Additionally, the following uninstall_methods will no longer be supported: AdobeSetup, AdobeUberUninstaller, AdobeCS5AAMEEPackage, AdobeCCPUninstaller
• Support for configuration profile install and removal (https://github.com/munki/munki/wiki/Managing-Configuration-Profiles). Installer_type profile will no longer be supported.
• Apple update metadata (https://github.com/munki/munki/wiki/Pkginfo-For-Apple-Software-Updates) Installer_type apple_update_metadata will no longer be supported.
• appdmg installer_type (this has been deprecated for years, but support will be removed in the near future): https://github.com/munki/munki/wiki/App-Dmg-Package-Notes
• suppress_bundle_relocation pkginfo key. This only ever worked for bundle-style packages. Bundle-style packages are no longer supported as of macOS Sequoia, and so support for this feature will be dropped in a future release of Munki.

Munki 6.6.4 Official Release

This is the official release of Munki 6.6.4: a bug-fix release of the Munki tools.

Fixes

• Yet another attempt at fixing a cosmetic issue when Munki is running at the loginwindow and sometimes the background blur window doesn't cover the entire background: b385bd8
• When a package contains an Apple Archive-formatted payload instead of a pax/cpio archive, ensure /usr/bin/aa exists before attempting to call it. Addresses a crashing issue when extracting icons on macOS < 11 40b44ae

A complete list of changes from the 6.6.3 release is here: v6.6.3...v6.6.4

Known issues

Downgrading from 6.6.x to 6.4.2 or earlier

If you install a version of the Munki tools that contains the Python 3.12 framework, and then later attempt to downgrade by installing an older version of the Munki tools (say, 6.4.2.4634) that contains a Python 3.10 (or earlier) framework, /usr/local/munki/munki-python will be broken. See https://github.com/munki/munki/wiki/Downgrading-Munki-tools for more information.

Upgrading Munki with Munki

If you use a technique similar to the one described here to allow Munki to update itself without requiring a restart, be sure to mark the Munki 6.6.x launchd item as an unattended_install. If you don't do that, Munki may not be able to update itself completely without user involvement.
See this post: https://groups.google.com/g/munki-discuss/c/ikIw2mPddM0/m/h95J_DyrCwAJ for more details.

Autopkg recipes here for "munkitools6" have been updated to just install the package as-is, which is the current recommendation.

Additional Information

Build info

The GUI apps and the Python framework were built under Xcode 16.2 on macOS 15.3. Builds should work on Xcode 14.3.1 through Xcode 16.2, but these other versions of Xcode have not been tested and may cause different results. (Due to Apple bugs, Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

OS version support

This release should work on macOS 10.13 through macOS 15, though it gets little-to-no testing on versions prior to macOS 13. Please report issues you find with older macOS versions.

Package versioning

• Distribution package version: 6.6.4.4708
• munki core tools version: 6.6.4.4708
• LaunchAgents/LaunchDaemons version: 6.6.0.4656
• Apps package version: 6.6.3.4707
• Python package version: 3.12.2.4689

Attachment info

The munkitools-6.6.4.4708.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart . It should be suitable for most deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases.
The build corresponding to this release is here: https://github.com/macadmins/munki-builds/releases/tag/v6.6.4.4708

Deprecation notes

The following Munki features are considered deprecated and will be removed in a future Munki release:

• Bundled Python: a future release of Munki will remove all dependency on Python and will no longer include a bundled version of Python.
• Installation of Apple software updates. Munki currently does not install Apple updates on Apple silicon, but instead prompts the user to use Apple tools (Settings app; softwareupdate) to do so. A future release will extend this behavior to Intel Macs as well.
• Special support/treatment of Adobe Creative Cloud packages (and other special Adobe installer types). The following installer_types will no longer be supported: AdobeSetup, AdobeUberInstaller, AdobeAcrobatUpdater, AdobeCS5AAMEEPackage, AdobeCS5PatchInstaller, AdobeCCPInstaller Additionally, the following uninstall_methods will no longer be supported: AdobeSetup, AdobeUberUninstaller, AdobeCS5AAMEEPackage, AdobeCCPUninstaller
• Support for configuration profile install and removal (https://github.com/munki/munki/wiki/Managing-Configuration-Profiles). Installer_type profile will no longer be supported.
• Apple update metadata (https://github.com/munki/munki/wiki/Pkginfo-For-Apple-Software-Updates) Installer_type apple_update_metadata will no longer be supported.
• appdmg installer_type (this has been deprecated for years, but support will be removed in the near future): https://github.com/munki/munki/wiki/App-Dmg-Package-Notes
• suppress_bundle_relocation pkginfo key. This only ever worked for bundle-style packages.

Munki 6.6.3 Official Release

This is the official release of Munki 6.6.3: a bug-fix release of the Munki tools.

Fixes

• A fix for an issue with aggressive notifications if Managed Software Center is open and the user is working full-screen in another application. Thanks to @BrandonNolet for the report (#1229) and thanks to @tburgin for the fix: d130308
• A fix for an issue when expanding a package to look for product icons when the package contains an Apple Archive-formatted payload instead of a pax/cpio archive. 85e82c6

A complete list of changes from the 6.6.2 release is here: v6.6.2...v6.6.3

Known issues

Downgrading from 6.6.x to 6.4.2 or earlier

If you install a version of the Munki tools that contains the Python 3.12 framework, and then later attempt to downgrade by installing an older version of the Munki tools (say, 6.4.2.4634) that contains a Python 3.10 (or earlier) framework, /usr/local/munki/munki-python will be broken. See https://github.com/munki/munki/wiki/Downgrading-Munki-tools for more information.

Upgrading Munki with Munki

If you use a technique similar to the one described here to allow Munki to update itself without requiring a restart, be sure to mark the Munki 6.6.x launchd item as an unattended_install. If you don't do that, Munki may not be able to update itself completely without user involvement.
See this post: https://groups.google.com/g/munki-discuss/c/ikIw2mPddM0/m/h95J_DyrCwAJ for more details.

Autopkg recipes here for "munkitools6" have been updated to just install the package as-is, which is the current recommendation.

Additional Information

Build info

The GUI apps and the Python framework were built under Xcode 15.4 on macOS 14.7. Xcode 14.3.1 on macOS 13 should work as well. Other versions of Xcode have not been tested and may cause different results. (Due to Apple bugs, Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

OS version support

This release should work on macOS 10.13 through macOS 15, though it gets little-to-no testing on versions prior to macOS 13. Please report issues you find with older macOS versions.

Package versioning

• Distribution package version: 6.6.3.4704
• munki core tools version: 6.6.3.4704
• LaunchAgents/LaunchDaemons version: 6.6.0.4656
• Apps package version: 6.6.3.4704
• Python package version: 3.12.2.4689

Attachment info

The munkitools-6.6.3.4704.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart . It should be suitable for most deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.

Deprecation notes

The following Munki features are considered deprecated and will be removed in a future Munki release:

• Bundled Python: a future release of Munki will remove all dependency on Python and will no longer include a bundled version of Python.
• Installation of Apple software updates. Munki currently does not install Apple updates on Apple silicon, but instead prompts the user to use Apple tools (Settings app; softwareupdate) to do so. A future release will extend this behavior to Intel Macs as well.
• Special support/treatment of Adobe Creative Cloud packages (and other special Adobe installer types). The following installer_types will no longer be supported: AdobeSetup, AdobeUberInstaller, AdobeAcrobatUpdater, AdobeCS5AAMEEPackage, AdobeCS5PatchInstaller, AdobeCCPInstaller Additionally, the following uninstall_methods will no longer be supported: AdobeSetup, AdobeUberUninstaller, AdobeCS5AAMEEPackage, AdobeCCPUninstaller
• Support for configuration profile install and removal (https://github.com/munki/munki/wiki/Managing-Configuration-Profiles). Installer_type profile will no longer be supported.
• Apple update metadata (https://github.com/munki/munki/wiki/Pkginfo-For-Apple-Software-Updates) Installer_type apple_update_metadata will no longer be supported.
• appdmg installer_type (this has been deprecated for years, but support will be removed in the near future): https://github.com/munki/munki/wiki/App-Dmg-Package-Notes
• suppress_bundle_relocation pkginfo key. This only ever worked for bundle-style packages.

Munki 6.6.2 Official Release

This is the official release of Munki 6.6.2: a bug-fix release of the Munki tools.

Fixes

• A fix for an issue with MunkiStatus at the loginwindow where the new blurred backdrop windows would hide the log window and any other utility windows that might be displayed at the loginwindow. 2d34cbe
• When processing optional_installs, correctly record installed_size if available instead of just duplicating installer_item_size. 93b2640

A complete list of changes from the 6.6.1 release is here: v6.6.1...v6.6.2

Known issues

Downgrading from 6.6.x to 6.4.2 or earlier

If you install a version of the Munki tools that contains the Python 3.12 framework, and then later attempt to downgrade by installing an older version of the Munki tools (say, 6.4.2.4634) that contains a Python 3.10 (or earlier) framework, /usr/local/munki/munki-python will be broken. See https://github.com/munki/munki/wiki/Downgrading-Munki-tools for more information.

Upgrading Munki with Munki

If you use a technique similar to the one described here to allow Munki to update itself without requiring a restart, be sure to mark the Munki 6.6 launchd item as an unattended_install. If you don't do that, Munki may not be able to update itself completely without user involvement.
See this post: https://groups.google.com/g/munki-discuss/c/ikIw2mPddM0/m/h95J_DyrCwAJ for more details.

Autopkg recipes here for "munkitools6" have been updated to just install the package as-is, which is the current recommendation.

Additional Information

Build info

The GUI apps and the Python framework were built under Xcode 15.4 on macOS 14.6.1 Xcode 14.3.1 on macOS 13 should work as well. Other versions of Xcode have not been tested and may cause different results. (Due to Apple bugs, Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

OS version support

This release should work on macOS 10.13 through macOS 15, though it gets little-to-no testing on versions prior to macOS 13. Please report issues you find with older macOS versions.

Package versioning

• Distribution package version: 6.6.2.4700
• munki core tools version: 6.6.2.4699
• LaunchAgents/LaunchDaemons version: 6.6.0.4656
• Apps package version: 6.6.1.4700
• Python package version: 3.12.2.4689

Attachment info

The munkitools-6.6.2.4700.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart . It should be suitable for most deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.

Deprecation notes

The following Munki features are considered deprecated and will be removed in a future Munki release:

• Bundled Python: a future release of Munki will remove all dependency on Python and will no longer include a bundled version of Python.
• Installation of Apple software updates. Munki currently does not install Apple updates on Apple silicon, but instead prompts the user to use Apple tools (Settings app; softwareupdate) to do so. A future release will extend this behavior to Intel Macs as well.
• Special support/treatment of Adobe Creative Cloud packages (and other special Adobe installer types). The following installer_types will no longer be supported: AdobeSetup, AdobeUberInstaller, AdobeAcrobatUpdater, AdobeCS5AAMEEPackage, AdobeCS5PatchInstaller, AdobeCCPInstaller Additionally, the following uninstall_methods will no longer be supported: AdobeSetup, AdobeUberUninstaller, AdobeCS5AAMEEPackage, AdobeCCPUninstaller
• Support for configuration profile install and removal (https://github.com/munki/munki/wiki/Managing-Configuration-Profiles). Installer_type profile will no longer be supported.
• Apple update metadata (https://github.com/munki/munki/wiki/Pkginfo-For-Apple-Software-Updates) Installer_type apple_update_metadata will no longer be supported.
• appdmg installer_type (this has been deprecated for years, but support will be removed in the near future): https://github.com/munki/munki/wiki/App-Dmg-Package-Notes
• suppress_bundle_relocation pkginfo key. This only ever worked for bundle-style packages.

Munki 6.6.1 Official Release

This is the official release of Munki 6.6.1: a a bug-fix and minor enhancement release of the Munki tools.

Bug fixes

• Address an issue that could cause the main updates window to not be displayed during an "aggressive notification", leaving all displays "blurred" but no window to interact with: 17d50aa
• Address an issue where the Software Updates pane was not visible for ten seconds after clicking "Update now" when an "aggressive notification" had occurred (the window opened behind the blur windows, and these windows remained in place for ten seconds): f36fceb

Enhancements

• New --show-config-plist option for managedsoftwareupdate that outputs the current configuration as an XML plist. Thanks to @grahamgilbert (7523768)
• Add default Apple software update catalog for macOS 15 Sequoia (ee5d524)

A complete list of changes from the 6.6.0 release is here: v6.6.0...v6.6.1

Known issues

Downgrading from 6.6.x to 6.4.2 or earlier

If you install a version of the Munki tools that contains the Python 3.12 framework, and then later attempt to downgrade by installing an older version of the Munki tools (say, 6.4.2.4634) that contains a Python 3.10 (or earlier) framework, /usr/local/munki/munki-python will be broken. See https://github.com/munki/munki/wiki/Downgrading-Munki-tools for more information.

Upgrading Munki with Munki

If you use a technique similar to the one described here to allow Munki to update itself without requiring a restart, be sure to mark the Munki 6.6 launchd item as an unattended_install. If you don't do that, Munki may not be able to update itself completely without user involvement.
See this post: https://groups.google.com/g/munki-discuss/c/ikIw2mPddM0/m/h95J_DyrCwAJ for more details.

Autopkg recipes here for "munkitools6" have been updated to just install the package as-is, which is the current recommendation.

Additional Information

Build info

The GUI apps and the Python framework were built under Xcode 15.4 on macOS 14.6.1 Xcode 14.3.1 on macOS 13 should work as well. Other versions of Xcode have not been tested and may cause different results. (Due to Apple bugs, Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

OS version support

This release should work on macOS 10.13 through the macOS 15 beta, though it gets little-to-no testing on versions prior to macOS 13. Please report issues you find with older macOS versions.

Package versioning

• Distribution package version: 6.6.1.4696
• munki core tools version: 6.6.1.4696
• LaunchAgents/LaunchDaemons version: 6.6.0.4656
• Apps package version: 6.6.1.4695
• Python package version: 3.12.2.4689

Attachment info

The munkitools-6.6.1.4696.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart . It should be suitable for most deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.

Deprecation notes

The following Munki features are considered deprecated and will be removed in a future Munki release:

• Bundled Python: a future release of Munki will remove all dependency on Python and will no longer include a bundled version of Python.
• Installation of Apple software updates. Munki currently does not install Apple updates on Apple silicon, but instead prompts the user to use Apple tools (Settings app; softwareupdate) to do so. A future release will extend this behavior to Intel Macs as well.
• Special support/treatment of Adobe Creative Cloud packages (and other special Adobe installer types). The following installer_types will no longer be supported: AdobeSetup, AdobeUberInstaller, AdobeAcrobatUpdater, AdobeCS5AAMEEPackage, AdobeCS5PatchInstaller, AdobeCCPInstaller Additionally, the following uninstall_methods will no longer be supported: AdobeSetup, AdobeUberUninstaller, AdobeCS5AAMEEPackage, AdobeCCPUninstaller
• Support for configuration profile install and removal (https://github.com/munki/munki/wiki/Managing-Configuration-Profiles). Installer_type profile will no longer be supported.
• Apple update metadata (https://github.com/munki/munki/wiki/Pkginfo-For-Apple-Software-Updates) Installer_type apple_update_metadata will no longer be supported.
• appdmg installer_type (this has been deprecated for years, but support will be removed in the near future): https://github.com/munki/munki/wiki/App-Dmg-Package-Notes
• suppress_bundle_relocation pkginfo key. This only ever worked for bundle-style packages.

Munki 6.6 Official Release

This is the official release of Munki 6.6: a feature release of the Munki tools.
This build is identical to v6.6RC1.

Changes

• When presenting "Aggressive Notifications" (https://github.com/munki/munki/wiki/aggressive-update-notifications-in-munki-5) , Managed Software Center will now use a full-screen blur effect behind the Updates window to encourage user interaction with the app. Previously, it "dimmed", or "greyed out" everything behind the app window, which might have been too subtle an indication that the user should pay attention to Managed Software Center. Thanks to Bart Reardon for much of the relevent code, borrowed from Swift Dialog. e6de68c

• At the loginwindow, MunkiStatus will also use a blurred background behind its progress window. The blurred background is more consistent with Apple's UI for Setup Assistant and Migration Assistant. 6d22382
  and also faa0481, Thanks to @nixtar.

• Some changes to the structure and organization of the Managed Software Center application bundle that make customizing the app icon without breaking signing possible. Thanks to Ben Toms. dc2725e

• The above changes then triggered required changes to several launchd jobs. To avoid the need for a restart or logout, a new helper tool has been added to manage launchd job changes. Thanks to Ben Toms. 183005e (and others)
  and also cc7252d, Thanks to @rrenstrom.

A complete list of changes from the 6.5.0 release is here: v6.5.1...v6.6.0

Known issues

Downgrading from 6.6.x to 6.4.2 or earlier

If you install a version of the Munki tools that contains the Python 3.12 framework, and then later attempt to downgrade by installing an older version of the Munki tools (say, 6.4.2.4634) that contains a Python 3.10 (or earlier) framework, /usr/local/munki/munki-python will be broken. See https://github.com/munki/munki/wiki/Downgrading-Munki-tools for more information.

Upgrading Munki with Munki

If you use a technique similar to the one described here to allow Munki to update itself without requiring a restart, be sure to mark the Munki 6.6 launchd item as an unattended_install. If you don't do that, Munki may not be able to update itself completely without user involvement.
See this post: https://groups.google.com/g/munki-discuss/c/ikIw2mPddM0/m/h95J_DyrCwAJ for more details.

Additional Information

Build info

The GUI apps and the Python framework were built under Xcode 15.4 on macOS 14.6. Xcode 14.3.1 on macOS 13 should work as well. Other versions of Xcode have not been tested and may cause different results. (Due to Apple bugs, Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

OS version support

This release should work on macOS 10.13 through the macOS 15 beta, though it gets little-to-no testing on versions prior to macOS 13. Please report issues you find with older macOS versions.

Package versioning

• Distribution package version: 6.6.0.4690
• munki core tools version: 6.6.0.4686
• LaunchAgents/LaunchDaemons version: 6.6.0.4656
• Apps package version: 6.6.0.4690
• Python package version: 3.12.2.4689

Attachment info

The munkitools-6.6.0.4688.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart . It should be suitable for most deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.

Deprecation announcement

The following Munki features are considered deprecated and will be removed in a future Munki release:

• Special support/treatment of Adobe Creative Cloud packages (and other special Adobe installer types). The following installer_types will no longer be supported: AdobeSetup, AdobeUberInstaller, AdobeAcrobatUpdater, AdobeCS5AAMEEPackage, AdobeCS5PatchInstaller, AdobeCCPInstaller Additionally, the following uninstall_methods will no longer be supported: AdobeSetup, AdobeUberUninstaller, AdobeCS5AAMEEPackage, AdobeCCPUninstaller
• Support for configuration profile install and removal (https://github.com/munki/munki/wiki/Managing-Configuration-Profiles). Installer_type profile will no longer be supported.
• Apple update metadata (https://github.com/munki/munki/wiki/Pkginfo-For-Apple-Software-Updates) Installer_type apple_update_metadata will no longer be supported.
• appdmg installer_type (this has been deprecated for years, but support will be removed in the near future): https://github.com/munki/munki/wiki/App-Dmg-Package-Notes
• suppress_bundle_relocation pkginfo key. This only ever worked for bundle-style packages.

Also being considered for deprecation/removal in the future is support for installation of Apple software updates. This is almost entirely non-functional for Apple silicon currently, so this would just continue the trend.

Munki 6.5.1 Official Release

This is the official release of Munki 6.5.1: a bug-fix release of the Munki tools.

Changes

• A fix for a bug that prevented the new application data in conditional expressions feature from actually working as intended. (fbe22d2)
  See Conditional Application Data for more info on this feature, introduced (but due to the bug, effectively non-functional) in Munki 6.5: (bf1ce5a)
  Thanks to Tyler Gunderson for the bug report.

A complete list of changes from the 6.5.0 release is here: v6.5.0...v6.5.1

Known issues

Downgrading from 6.5.x to 6.4.2 or earlier

If you install a version of the Munki tools that contains the Python 3.12 framework, and then later attempt to downgrade by installing an older version of the Munki tools (say, 6.4.2.4634) that contains a Python 3.10 (or earlier) framework, /usr/local/munki/munki-python will be broken. See https://github.com/munki/munki/wiki/Downgrading-Munki-tools for more information.

Additional Information

Build info

The GUI apps and the Python framework were built under Xcode 15.3 on macOS 14.5. Xcode 14.3.1 on macOS 13 should work as well. Other versions of Xcode have not been tested and may cause different results. (Due to Apple bugs, Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

OS version support

This release should work on macOS 10.13 through macOS 14, though it gets little-to-no testing on versions prior to macOS 12. Please report issues you find with older macOS versions.

Package versioning

• Distribution package version: 6.5.1.4661
• munki core tools version: 6.5.1.4661
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 6.5.0.4654
• Python package version: 3.12.2.4653

Attachment info

The munkitools-6.5.1.4661.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.

Munki 6.5.0 Official Release

This is the official release of Munki 6.5.0: a new feature release of the Munki tools.

This is the same build as beta 3: there have been no changes since that build.

Changes

• Python changes (9e541a8)
  • Munki's included Python is now version 3.12.2
  • Certain added components have new versions:
    • cffi==1.16.0 (was 1.15.1)
    • pyobj-*==10.1 (was 9.1.1)
    • xattr==1.1.0 (was 0.10.1)
  • The imp module is no longer available in Python 3.12; this affected the import of middleware and repo plugins. The code has been updated to use importlib.util instead. (1850dbe)
• Managed Software Center: a new progress spinner appears in the sidebar next to the "Updates" label when an update is in progress. (64cdd0f)
• Source code: copyright dates updated
• Information about currently installed applications is available for use in manifest conditional_items and pkginfo installable_conditions. See Conditional Application Data for more info. (bf1ce5a)
• Updates to package pre- and postinstall scripts that call launchctl to use modern subcommands where possible. Drop support for pre-macOS 10.11 in these scripts. (bf91a80) (15de9ee)
• Better handling of items with autoremove=True that also have a requires list and one or more required dependency cannot be resolved. (18ea6c4)
• Better logging info when an item cannot be removed because other Munki items share the exact same packages (45b7ac6)
• Workaround for unexpected content in /usr/sbin/installer due to new bundle-style package deprecation warnings (new in macOS 14.4) 29fd72a Thanks to @vmiller for reporting this issue.
• manifestutil now has a delete-manifest subcommand: af4296d Thanks to @SteveKueng.
• Improved debug messages when attempting to find a valid uninstall method for an item: c9e3250
• Some changes to date/time handling so we have more explicit control of date-to-string and string-to-date conversions: aeac6e9

A complete list of changes from the 6.4.0 release is here: v6.4.2...v6.5.0

Known issues

Downgrading from 6.5 to an earlier version

If you install a version of the Munki tools that contains the Python 3.12 framework, and then later attempt to downgrade by installing an older version of the Munki tools (say, 6.4.2.4634) that contains a Python 3.10 (or earlier) framework, /usr/local/munki/munki-python will be broken. See https://github.com/munki/munki/wiki/Downgrading-Munki-tools for more information.

Additional Information

Build info

The GUI apps and the Python framework were built under Xcode 15.3 on macOS 14.4.1. Xcode 14.3.1 on macOS 13 should work as well. Other versions of Xcode have not been tested and may cause different results. (Due to Apple bugs, Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

OS version support

This release should work on macOS 10.13 through macOS 14, though it gets little-to-no testing on versions prior to macOS 12. Please report issues you find with older macOS versions.

Package versioning

• Distribution package version: 6.5.0.4659
• munki core tools version: 6.5.0.4659
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 6.5.0.4654
• Python package version: 3.12.2.4653

Attachment info

The munkitools-6.5.0.4659.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.

Munki 6.4.2 Official Release

This is the official release of Munki 6.4.2: a bug-fix and minor feature release of the Munki tools.

Changes

• New IgnoreMiddleware preference to ignore middleware by @patgmac in #1194. Useful if you are transitioning to/away from using middleware: you can turn it off (and possibly back on) without having to uninstall/reinstall the actual middleware.

Fixes

• The new board-id and device-id conditional facts introduced in Munki 6.4 have been renamed board_id and device_id, respectively. It turns out the previous names are illegal in NSPredicate expressions and caused a client run to be terminated unexpectedly if used in conditional_items or installable_condition. Thanks to @mattydee99 for reporting this issue. (8edfc6a)
• Handling of predicate expressions is now more careful to prevent a bad predicate from causing an unexpected termination. (dd74af6)

A complete list of changes from the 6.4.0 release is here: v6.4.1...v6.4.2

Build info

The GUI apps and the Python framework were built under Xcode 15.1 on macOS 14.3. Xcode 14.3.1 on macOS 13 should work as well. Other versions of Xcode have not been tested and may cause different results. (Due to Apple bugs, Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

OS version support

This release should work on macOS 10.13 through macOS 14, though it gets little-to-no testing on versions prior to macOS 12. Please report issues you find with older macOS versions.

Package versioning

• Distribution package version: 6.4.2.4634
• munki core tools version: 6.4.2.4634
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 6.4.0.4628
• Python package version: 3.10.11.4623

Attachment info

The munkitools-6.4.2.4634.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.

Munki 6.4.1 Official Release

This is the official release of Munki 6.4.1: a bug-fix release of the Munki tools.

Fixes

• Placement and appearance of the "back button" (which allows you to navigate back to the previous page in certain Managed Software Center views) has been tweaked to behave more like current macOS control behavior for tool bar items. (See #1195 for discussion)
• Fix addressing #1083 -- Managed Software Center should no longer get stuck in a check loop, but rather stop and display an error when it cannot successfully retrieve the primary manifest.

A complete list of changes from the 6.4.0 release is here: v6.4.0...v6.4.1

Build info

The GUI apps and the Python framework were built under Xcode 15.1 on macOS 14.2.1. Xcode 14.3.1 on macOS 13 should work as well. Other versions of Xcode have not been tested and may cause different results. (Due to Apple bugs, Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

Package versioning

• Distribution package version: 6.4.1.4630
• munki core tools version: 6.4.1.4630
• LaunchAgents/LaunchDaemons version: 3.0.3265
• Apps package version: 6.4.0.4628
• Python package version: 3.10.11.4623

Attachment info

The munkitools-6.4.1.4630.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart unless upgrading from an extremely old Munki tools (like one of the 3.x releases or earlier). It should be suitable for most initial deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases. There may be a delay for new releases -- please be patient.