Munki 7.2.0 Beta 2

This is a beta build of Munki 7.2.0, a feature-add and bug-fix release of the Munki tools.

Build info

• This release was built with Xcode 26.5 (17F42) on macOS 26.4 (25E246) via a GitHub Actions workflow here: https://github.com/macadmins/munki-builds. It has been signed and notarized by MacAdmins Open Source.

• Distribution package version: 7.2.0.5762

  • Components:
    • com.googlecode.munki.core 7.2.0.5755
    • com.googlecode.munki.admin 7.2.0.5755
    • com.googlecode.munki.app 7.2.0.5762
    • com.googlecode.munki.app_usage 7.2.0.5755
    • com.googlecode.munki.launchd 7.0.0.5320
    • com.googlecode.munki.pythonlibs 6.7.0.5293
    • com.googlecode.munki.libs 5.5

Bug fixes:

• Percent-encode '+' character in all requests for Munki resources; this makes some web servers happier. 427a926
• MSC.app: Fix for an issue where you are repeatedly prompted to install available Apple updates when attempting to quit ec7a61c
• MSC.app: Fix positioning/layout of status info on item detail pages. Addresses #1357 Thanks to @chrisgrande and @robertryansqub. 2e4e3e1

Changes:

• When failing to retrive the primary manifest, instead of exiting immediately, continue to run any existing Munki postflight script. Addresses #1353 Thanks to @BigMacAdmin. 81721f3
• A fix for a potential security issue: this change prevents embedding external URLs inside munki:// URLs. Thanks to @kevinmcox. ttps://github.com/munki/munki/commit/b015b45d419f21f5315b565627ee8234ef46210b

New feature:

• Optional (admin-managed) user preference for "allowed notification time windows".
  See https://github.com/munki/munki/wiki/Allowed-notification-windows for details on this new feature.

Changes and fixes since 7.2.0 Beta 1:

• managedsoftwareupdate: Changes to status/progress info messages for more consistent/predictable progress info: 17838ce
• Swedish translation for prefs window. Thanks to @MagerValp. #1361
• Danish translation for prefs window. Thanks to @ttv-kglakademi-dk. #1362
• Japanese translation for prefs window. Thanks to @arubdesu and Koji Arita. #1363
• manifestutil: A fix for a reference to a non-existent subcommand. Thanks to @jc0b. #1365
• Many enhancements/changes to the Hour Selector control in the preferences window to improve Accessibility: Contrast improvements, support for keyboard navigation, and other Accessibility support. Thanks to @vmiller for raising an issue. d6f2a8c 42fe62b d2a2d4c 48a6f56 5372cb7

A complete list of changes between 7.1.2 and 7.2.0b2 is here: v7.1.2...v7.2.0b2

Localization help needed:

For the new "allowed notification time windows" preference, the text label for "Restrict update notifications to selected hours" needs to be translated/localized. Help still needed for the following languages:

• German
• Spanish
• Finnish
• French
• Italian
• Norwegian Bokmal
• Dutch
• Russian

Munki 7.2 Beta 1

This is a beta build of Munki 7.2.0, a feature-add and bug-fix release of the Munki tools.

Build info

• This release was built with Xcode 26.2 (17C52) on macOS 26.4 (25E246) via a GitHub Actions workflow here: https://github.com/macadmins/munki-builds. It has been signed and notarized by MacAdmins Open Source.

• Distribution package version: 7.2.0.5741

  • Components:
    • com.googlecode.munki.core 7.2.0.5740
    • com.googlecode.munki.admin 7.2.0.5740
    • com.googlecode.munki.app 7.2.0.5741
    • com.googlecode.munki.app_usage 7.2.0.5740
    • com.googlecode.munki.launchd 7.0.0.5320
    • com.googlecode.munki.pythonlibs 6.7.0.5293
    • com.googlecode.munki.libs 5.5

Bug fixes:

• Percent-encode '+' character in all requests for Munki resources; this makes some web servers happier. 427a926
• MSC.app: Fix for an issue where you are repeatedly prompted to install available Apple updates when attempting to quit ec7a61c
• MSC.app: Fix positioning/layout of status info on item detail pages. Addresses #1357 Thanks to @chrisgrande and @robertryansqub. 2e4e3e1

Changes:

• When failing to retrive the primary manifest, instead of exiting immediately, continue to run any existing Munki postflight script. Addresses #1353 Thanks to @BigMacAdmin. 81721f3
• A fix for a potential security issue: this change prevents embedding external URLs inside munki:// URLs. Thanks to @kevinmcox. ttps://github.com/munki/munki/commit/b015b45d419f21f5315b565627ee8234ef46210b

New feature:

• Optional (admin-managed) user preference for "allowed notification time windows".
  See https://github.com/munki/munki/wiki/Allowed-notification-windows for details on this new feature.

A complete list of changes between 7.1.2 and 7.2.0b1 is here: v7.1.2...v7.2.0b1

Localization help needed:

• For the new "allowed notification time windows" preference, the text label for "Restrict update notifications to selected hours" needs to be translated/localized.

Munki 7.1.2 Official Release

This is the official release of Munki 7.1.1, a bug-fix release of the Munki tools.

Build info

• This release was built with Xcode 26.2 (17C52) on macOS 26.3 (25D125) via a GitHub Actions workflow here: https://github.com/macadmins/munki-builds. It has been signed and notarized by MacAdmins Open Source.

• Distribution package version: 7.1.2.5700

  • Components:
    • com.googlecode.munki.core 7.1.2.5700
    • com.googlecode.munki.admin 7.1.2.5700
    • com.googlecode.munki.app 7.1.2.5700
    • com.googlecode.munki.app_usage 7.1.2.5700
    • com.googlecode.munki.launchd 7.0.0.5320
    • com.googlecode.munki.pythonlibs 6.7.0.5293
    • com.googlecode.munki.libs 5.5

Changes since 7.1.1

• A fix for an issue where Munki would trigger an aggressive update notifcation, claiming macOS was many days out of date, even though a new version of macOS was first available today. Thanks to @jamesez. 27af6fc c3ea21c

• manifestutil: A fix for searching for text in string "fields" in manifests. Thanks to @dziermeier. #1355 a5525f3

A complete list of changes between 7.1.1 and 7.1.2 is here: v7.1.1...v7.1.2

New features in Munki 7.1 (and 7.1.1 and 7.1.2)

• Assisted quit of blocking applications: Managed Software Center can now assist the user with quitting (and relaunching) running applications that block the install of pending updates. Thanks to @jordancalhoun. #1305

  • If the preference is set to allow MSC.app to offer to quit blocking applications, Managed Software Center can now offer to let the user ignore the updates blocked by running applications and just install other pending updates not blocked by open applications. Authored by @gregneagle

  • Similarly, users can now be allowed to skip updates that require a logout or restart, installing any remaining updates.

• Download retries: managedsoftwareupdate can now retry downloads of manifests, catalogs, installer items and the like. This is an attempt to improve behavior when there are transisent network failures. Thanks to @MagerValp. #1307

• The above new features are disabled by default. You must "opt-in" to them by setting new preferences in the ManagedInstalls preferences domain, and by adding new keys and values to pkginfo files. More information is available later in this document.

  • While testing, I'd recommend just setting the new preferences in /Library/Preferences/ManagedInstalls.plist, at least for initial testing on one or two machines.

• LocalOnlyManifest This manifest can now contain default_installs and featured_installs. Thanks to @MagerValp. #1314

Other changes

• If configured to notify about Apple updates, Managed Software Center will now warn the user how long macOS has been out-of-date, instead of merely warning how long the current macOS update has been available. (Previously this count got reset each time a new macOS update was released. For example, three days after macOS 26.4 was released, a user with a Mac running 26.3 or earlier would be warned that the update had been available for three days. Yes, this is true, but more importantly, macOS had been out-of-date for 20 days or more.)

• In Managed Software Center, when any modal sheet is open and a background update run occurs, the modal is cancelled and closed. This avoids issues with background updates changing what updates are available/pending, making the modal sheets inaccurate or irrelevant.

• If configured to notify about Apple updates, Apple updates now get their own "section" in the updates view, hopefully making it clearer which updates will be installed by Munki and which users will have to install via other means.

• On macOS 26, if the only available Apple update is a "Background Security Improvement", Managed Software Center will open the Background Security Improvements view in System Settings instead of the Software Update view.

• To support the new features to update non-blocked items from Managed Software Center when there are some items blocked by running applications, the behavior of managedsoftwareupdate --installwithnologout and managedsoftwareupdate --installonly has changed. See here for details.

Additional details

Managed Software Center assisted quit (and relaunch) of blocking applications

See details on this new feature here.

Download retries

See info on this new feature here.

Known issue

If a download is retried, it does not resume a partial (failed) download; it starts again from the beginning.

Munki 7.1.1 Official Release

This is the official release of Munki 7.1.1, a bug-fix release of the Munki tools.

Build info

• This release was built with Xcode 26.2 (17C52) on macOS 26.3 (25D125) via a GitHub Actions workflow here: https://github.com/macadmins/munki-builds. It has been signed and notarized by MacAdmins Open Source.

• Distribution package version: 7.1.1.5696

  • Components:
    • com.googlecode.munki.core 7.1.1.5696
    • com.googlecode.munki.admin 7.1.1.5696
    • com.googlecode.munki.app 7.1.1.5696
    • com.googlecode.munki.app_usage 7.1.1.5696
    • com.googlecode.munki.launchd 7.0.0.5320
    • com.googlecode.munki.pythonlibs 6.7.0.5293
    • com.googlecode.munki.libs 5.5

Changes since 7.1

• Fix for issue where pending updates section was hidden when there were no pending updates but there were either additional updates or problem items. Thanks to @TonyPaco. 6eda31b

A complete list of changes between 7.1.0 and 7.1.1 is here: https://github.com/munki/munki/compare/v7.1.0..v7.1.1

New features in Munki 7.1 (and 7.1.1)

• Assisted quit of blocking applications: Managed Software Center can now assist the user with quitting (and relaunching) running applications that block the install of pending updates. Thanks to @jordancalhoun. #1305

  • If the preference is set to allow MSC.app to offer to quit blocking applications, Managed Software Center can now offer to let the user ignore the updates blocked by running applications and just install other pending updates not blocked by open applications. Authored by @gregneagle

  • Similarly, users can now be allowed to skip updates that require a logout or restart, installing any remaining updates.

• Download retries: managedsoftwareupdate can now retry downloads of manifests, catalogs, installer items and the like. This is an attempt to improve behavior when there are transisent network failures. Thanks to @MagerValp. #1307

• The above new features are disabled by default. You must "opt-in" to them by setting new preferences in the ManagedInstalls preferences domain, and by adding new keys and values to pkginfo files. More information is available later in this document.

  • While testing, I'd recommend just setting the new preferences in /Library/Preferences/ManagedInstalls.plist, at least for initial testing on one or two machines.

• LocalOnlyManifest This manifest can now contain default_installs and featured_installs. Thanks to @MagerValp. #1314

Other changes

• If configured to notify about Apple updates, Managed Software Center will now warn the user how long macOS has been out-of-date, instead of merely warning how long the current macOS update has been available. (Previously this count got reset each time a new macOS update was released. For example, three days after macOS 26.4 was released, a user with a Mac running 26.3 or earlier would be warned that the update had been available for three days. Yes, this is true, but more importantly, macOS had been out-of-date for 20 days or more.)

• In Managed Software Center, when any modal sheet is open and a background update run occurs, the modal is cancelled and closed. This avoids issues with background updates changing what updates are available/pending, making the modal sheets inaccurate or irrelevant.

• If configured to notify about Apple updates, Apple updates now get their own "section" in the updates view, hopefully making it clearer which updates will be installed by Munki and which users will have to install via other means.

• On macOS 26, if the only available Apple update is a "Background Security Improvement", Managed Software Center will open the Background Security Improvements view in System Settings instead of the Software Update view.

• To support the new features to update non-blocked items from Managed Software Center when there are some items blocked by running applications, the behavior of managedsoftwareupdate --installwithnologout and managedsoftwareupdate --installonly has changed. See here for details.

Additional details

Managed Software Center assisted quit (and relaunch) of blocking applications

See details on this new feature here.

Download retries

See info on this new feature here.

Known issue

If a download is retried, it does not resume a partial (failed) download; it starts again from the beginning.

Munki 7.1 Official Release

This is the official release of Munki 7.1, a feature update and bug-fix release of the Munki tools.

Build info

• This release was built with Xcode 26.2 (17C52) on macOS 26.3 (25D125) via a GitHub Actions workflow here: https://github.com/macadmins/munki-builds. It has been signed and notarized by MacAdmins Open Source.

• Distribution package version: 7.1.0.5685

  • Components:
    • com.googlecode.munki.core 7.1.0.5685
    • com.googlecode.munki.admin 7.1.0.5685
    • com.googlecode.munki.app 7.1.0.5684
    • com.googlecode.munki.app_usage 7.1.0.5685
    • com.googlecode.munki.launchd 7.0.0.5320
    • com.googlecode.munki.pythonlibs 6.7.0.5293
    • com.googlecode.munki.libs 5.5

Changes since Release Candidate 3

• A fix for the appearance of the "Quit Blocking Applications" sheet when "Reduce Transparency" is enabled in Light Mode. Thanks to @dhmoore. #1351
• When rejecting an item due to failed installable_condition, include the actual item version in the warning message. f79b2ae

New features

• Assisted quit of blocking applications: Managed Software Center can now assist the user with quitting (and relaunching) running applications that block the install of pending updates. Thanks to @jordancalhoun. #1305

  • If the preference is set to allow MSC.app to offer to quit blocking applications, Managed Software Center can now offer to let the user ignore the updates blocked by running applications and just install other pending updates not blocked by open applications. Authored by @gregneagle

  • Similarly, users can now be allowed to skip updates that require a logout or restart, installing any remaining updates.

• Download retries: managedsoftwareupdate can now retry downloads of manifests, catalogs, installer items and the like. This is an attempt to improve behavior when there are transisent network failures. Thanks to @MagerValp. #1307

• The above new features are disabled by default. You must "opt-in" to them by setting new preferences in the ManagedInstalls preferences domain, and by adding new keys and values to pkginfo files. More information is available later in this document.

  • While testing, I'd recommend just setting the new preferences in /Library/Preferences/ManagedInstalls.plist, at least for initial testing on one or two machines.

• LocalOnlyManifest This manifest can now contain default_installs and featured_installs. Thanks to @MagerValp. #1314

Changes

• If configured to notify about Apple updates, Managed Software Center will now warn the user how long macOS has been out-of-date, instead of merely warning how long the current macOS update has been available. (Previously this count got reset each time a new macOS update was released. For example, three days after macOS 26.4 was released, a user with a Mac running 26.3 or earlier would be warned that the update had been available for three days. Yes, this is true, but more importantly, macOS had been out-of-date for 20 days or more.)

• In Managed Software Center, when any modal sheet is open and a background update run occurs, the modal is cancelled and closed. This avoids issues with background updates changing what updates are available/pending, making the modal sheets inaccurate or irrelevant.

• If configured to notify about Apple updates, Apple updates now get their own "section" in the updates view, hopefully making it clearer which updates will be installed by Munki and which users will have to install via other means.

• On macOS 26, if the only available Apple update is a "Background Security Improvement", Managed Software Center will open the Background Security Improvements view in System Settings instead of the Software Update view.

• To support the new features to update non-blocked items from Managed Software Center when there are some items blocked by running applications, the behavior of managedsoftwareupdate --installwithnologout and managedsoftwareupdate --installonly has changed. See here for details.

A complete list of changes between 7.0.10 and 7.1.0 is here: https://github.com/munki/munki/compare/v7.0.10..v7.1.0

Additional details

Managed Software Center assisted quit (and relaunch) of blocking applications

See details on this new feature here.

Download retries

See info on this new feature here.

Known issue

If a download is retried, it does not resume a partial (failed) download; it starts again from the beginning.

Munki 7.0.10 Official Release

This is the official release of Munki 7.0.10, a bug-fix and minor enhancement update to the Munki tools.

In Munki 7, the command-line tools and their helpers, previously written in Python and requiring a Python interpreter with PyObjC available, have all been rewritten in Swift and are compiled executables.

Supported OSes

• The Munki 7 command-line tools are built with a deployment target of macOS 10.15. That means the code runs on 10.15+, but little testing has been done on OSes prior to macOS 14. Munki 7 drops support for macOS 10.13 and 10.14.
• Managed Software Center has been updated to adopt the new look for macOS 26 (when built using Xcode 26, and when running on macOS 26). It runs as far back as macOS 10.15.

Build info

• This release was built with Xcode 26.2 (17C52) on macOS 26.3 (25D125) via a GitHub Actions workflow here: https://github.com/macadmins/munki-builds. It has been signed and notarized by MacAdmins Open Source.

• You can build this with Xcode 16, but the Managed Software Center application will not adopt all the new macOS 26-specific behavior/appearance.

• The distribution package now contains a new/additional component package: com.googlecode.munki.libs. On macOS 10.15 and macOS 11, this package installs a Swift runtime dynamic library needed for some of the Munki command-line tools. In a Munki pkginfo for this release, you should mark that receipt as optional.

• Distribution package version: 7.0.10.5496

  • Components:
    • com.googlecode.munki.core 7.0.10.5496
    • com.googlecode.munki.admin 7.0.10.5496
    • com.googlecode.munki.app 7.0.10.5496
    • com.googlecode.munki.app_usage 7.0.10.5496
    • com.googlecode.munki.launchd 7.0.0.5320
    • com.googlecode.munki.pythonlibs 6.7.0.5293
    • com.googlecode.munki.libs 5.5

Fixes in v7.0.10:

• Addresses an issue where Managed Software Center might display Major OS Upgrades when that was not wanted, and might display updates not visible in the output of softwareupdate --list or in the Software Update view in System Settings: 5f0d4d2

Changes in v7.0.9 (and still relevant for 7.0.10):

• On macOS 26, if the only available Apple update is a "Background Security Improvement", Managed Software Center will open the Background Security Improvements view in System Settings instead of the Software Update view.
• A fix for an issue where an attempted authorized restart would instead just be done as a normal restart. 3cf9648
• munkiimport/makepkginfo now can process payload-free packages, printing warnings instead of exiting with errors. b582e30
• Don't record "OldestUpdateDays" as a very small fractional number when the updates were presented in this session: 9041fb9

A complete list of changes from the 7.0.8 release is here: https://github.com/munki/munki/compare/v7.0.8..v7.0.10

What's new and changed in Munki 7

Munki 7 adds new features and removes a few as well.
See the wiki for details on all the changes: https://github.com/munki/munki/wiki/Munki-7-Introduction

Munki 7.0.8 Official Release

This is the official release of Munki 7.0.8, a bug-fix update to the Munki tools.

In Munki 7, the command-line tools and their helpers, previously written in Python and requiring a Python interpreter with PyObjC available, have all been rewritten in Swift and are compiled executables.

Supported OSes

• The Munki 7 command-line tools are built with a deployment target of macOS 10.15. That means the code runs on 10.15+, but little testing has been done on OSes prior to macOS 14. Munki 7 drops support for macOS 10.13 and 10.14.
• Managed Software Center has been updated to adopt the new look for macOS 26 (when built using Xcode 26, and when running on macOS 26). It runs as far back as macOS 10.15.

Build info

• This release was built with Xcode 26.2 (17C52) on macOS 26.3 (25D125) via a GitHub Actions workflow here: https://github.com/macadmins/munki-builds. It has been signed and notarized by MacAdmins Open Source.

• You can build this with Xcode 16, but the Managed Software Center application will not adopt all the new macOS 26-specific behavior/appearance.

• The distribution package now contains a new/additional component package: com.googlecode.munki.libs. On macOS 10.15 and macOS 11, this package installs a Swift runtime dynamic library needed for some of the Munki command-line tools. In a Munki pkginfo for this release, you should mark that receipt as optional.

• Distribution package version: 7.0.8.5479

  • Components:
    • com.googlecode.munki.core 7.0.8.5479
    • com.googlecode.munki.admin 7.0.8.5479
    • com.googlecode.munki.app 7.0.5.5446
    • com.googlecode.munki.app_usage 7.0.8.5479
    • com.googlecode.munki.launchd 7.0.0.5320
    • com.googlecode.munki.pythonlibs 6.7.0.5293
    • com.googlecode.munki.libs 5.5

Fixes in v7.0.8:

• managedsoftwareupdate: fixes an issue where bytes received would be printed even with the --quiet option. 328a938
• managedsoftwareupdate: fixes for processing stdout and stderr output while running subprocesses and scripts. 190bef6
• managedsoftwareupdate: a fix for attempting to remove non-existent items during receipt-based uninstall that caused bogus error messages and log noise. Thanks to @MagerValp. #1310 5eab584
• managedsoftwareupdate/Managed Software Center.app: Address an issue where displayed version of an item to install might be inaccurate, caused by managed_installs containing "Foo-version" and optional_installs containing "Foo". 1058ea8
• managedsoftwareupdate: a fix for an issue with removing the com.apple.quarantine attribute on copied items when the item contained a broken symlink. Thanks to @MagerValp. #1311 cfafe89

A complete list of changes from the 7.0.7 release is here: https://github.com/munki/munki/compare/v7.0.7..v7.0.8

What's new and changed in Munki 7

Munki 7 adds new features and removes a few as well.
See the wiki for details on all the changes: https://github.com/munki/munki/wiki/Munki-7-Introduction

Munki 7.0.7 Official Release

This is the official release of Munki 7.0.7, a bug-fix update to the Munki tools.

In Munki 7, the command-line tools and their helpers, previously written in Python and requiring a Python interpreter with PyObjC available, have all been rewritten in Swift and are compiled executables.

Supported OSes

• The Munki 7 command-line tools are built with a deployment target of macOS 10.15. That means the code runs on 10.15+, but little testing has been done on OSes prior to macOS 14. Munki 7 drops support for macOS 10.13 and 10.14.
• Managed Software Center has been updated to adopt the new look for macOS 26 (when built using Xcode 26, and when running on macOS 26). It runs as far back as macOS 10.15.

Build info

• This release was built with Xcode 26.0.1 (17A400) on macOS 26.0.1 (25A362) via a GitHub Actions workflow here: https://github.com/macadmins/munki-builds. It has been signed and notarized by MacAdmins Open Source.

• You can build this with Xcode 16, but the Managed Software Center application will not adopt all the new macOS 26-specific behavior/appearance.

• The distribution package now contains a new/additional component package: com.googlecode.munki.libs. On macOS 10.15 and macOS 11, this package installs a Swift runtime dynamic library needed for some of the Munki command-line tools. In a Munki pkginfo for this release, you should mark that receipt as optional.

• Distribution package version: 7.0.7.5468

  • Components:
    • com.googlecode.munki.core 7.0.7.5468
    • com.googlecode.munki.admin 7.0.7.5468
    • com.googlecode.munki.app 7.0.5.5446
    • com.googlecode.munki.app_usage 7.0.7.5468
    • com.googlecode.munki.launchd 7.0.0.5320
    • com.googlecode.munki.pythonlibs 6.7.0.5293
    • com.googlecode.munki.libs 5.5

Changes/fixes in v7.0.7:

• When configured to install Apple Software Updates, don't show Major OS Upgrades unless AppleSoftwareUpdatesIncludeMajorOSUpdates preference is True. Matches behavior of Munki 6. #1306

A complete list of changes from the 7.0.6 release is here: https://github.com/munki/munki/compare/v7.0.6..v7.0.7

What's new and changed in Munki 7

Munki 7 adds new features and removes a few as well.
See the wiki for details on all the changes: https://github.com/munki/munki/wiki/Munki-7-Introduction

Munki 7.0.6 Official Release

This is the official release of Munki 7.0.6, a bug-fix update to the Munki tools.

In Munki 7, the command-line tools and their helpers, previously written in Python and requiring a Python interpreter with PyObjC available, have all been rewritten in Swift and are compiled executables.

Supported OSes

• The Munki 7 command-line tools are built with a deployment target of macOS 10.15. That means the code runs on 10.15+, but little testing has been done on OSes prior to macOS 14. Munki 7 drops support for macOS 10.13 and 10.14.
• Managed Software Center has been updated to adopt the new look for macOS 26 (when built using Xcode 26, and when running on macOS 26). It runs as far back as macOS 10.15.

Build info

• This release was built with Xcode 26.0.1 (17A400) on macOS 26.0.1 (25A362) via a GitHub Actions workflow here: https://github.com/macadmins/munki-builds. It has been signed and notarized by MacAdmins Open Source.

• You can build this with Xcode 16, but the Managed Software Center application will not adopt all the new macOS 26-specific behavior/appearance.

• The distribution package now contains a new/additional component package: com.googlecode.munki.libs. On macOS 10.15 and macOS 11, this package installs a Swift runtime dynamic library needed for some of the Munki command-line tools. In a Munki pkginfo for this release, you should mark that receipt as optional.

• Distribution package version: 7.0.6.5465

  • Components:
    • com.googlecode.munki.core 7.0.6.5465
    • com.googlecode.munki.admin 7.0.6.5465
    • com.googlecode.munki.app 7.0.5.5446
    • com.googlecode.munki.app_usage 7.0.6.5465
    • com.googlecode.munki.launchd 7.0.0.5320
    • com.googlecode.munki.pythonlibs 6.7.0.5293
    • com.googlecode.munki.libs 5.5

Changes/fixes in v7.0.6:

• A fix for (re)loading the loginwindow LaunchAgents when the munkitools are installed at the loginwindow; improves bootstrapping in ADE workflows. Thanks to Melvin Peeters and Patrick van Nerum. 997c860
• A fix for installhelper logging on a fresh install of the munkitools where /Library/Managed\ Installs/Logs may not yet exist. a7f9d38
• A change to command-line feedback and logging when downloading a file and we can't calculate percent-done. Now does not spam the log with 'bytes received' messages. Thanks to @MagerValp. 6be968c
• A fix for extracting icons from apps where both CFBundleIconFile and CFBundleIconName is defined. Thanks to @kai-h. #1301 5f37fdb
• A fix for resource-leaking bug that could cause managedsoftwareupdate to freeze when there are a lot of package receipts present on a machine. Additionally, safer decoding of strings -- previously we could crash if the buffer was full but did not end with a valid UTF-8 character sequence. 5772c38
• More efficient methods to get installed package metadata when doing receipt-based removals. cf708d8

A complete list of changes from the 7.0.5 release is here: https://github.com/munki/munki/compare/v7.0.5..v7.0.6

What's new and changed in Munki 7

Munki 7 adds new features and removes a few as well.
See the wiki for details on all the changes: https://github.com/munki/munki/wiki/Munki-7-Introduction

Munki 7.0.5 Official Release

This is the official release of Munki 7.0.5, a bug-fix update to the Munki tools.

In Munki 7, the command-line tools and their helpers, previously written in Python and requiring a Python interpreter with PyObjC available, have all been rewritten in Swift and are compiled executables.

Supported OSes

• The Munki 7 command-line tools are built with a deployment target of macOS 10.15. That means the code runs on 10.15+, but little testing has been done on OSes prior to macOS 14. Munki 7 drops support for macOS 10.13 and 10.14.
• Managed Software Center has been updated to adopt the new look for macOS 26 (when built using Xcode 26, and when running on macOS 26). It runs as far back as macOS 10.15.

Build info

• This release was built with Xcode 26.0.1 (17A400) on macOS 26.0.1 (25A362) via a GitHub Actions workflow here: https://github.com/macadmins/munki-builds. It has been signed and notarized by MacAdmins Open Source.

• You can build this with Xcode 16, but the Managed Software Center application will not adopt all the new macOS 26-specific behavior/appearance.

• The distribution package now contains a new/additional component package: com.googlecode.munki.libs. On macOS 10.15 and macOS 11, this package installs a Swift runtime dynamic library needed for some of the Munki command-line tools. In a Munki pkginfo for this release, you should mark that receipt as optional.

• Distribution package version: 7.0.5.5448

  • Components:
    • com.googlecode.munki.core 7.0.5.5448
    • com.googlecode.munki.admin 7.0.5.5448
    • com.googlecode.munki.app 7.0.5.5446
    • com.googlecode.munki.app_usage 7.0.5.5448
    • com.googlecode.munki.launchd 7.0.0.5320
    • com.googlecode.munki.pythonlibs 6.7.0.5293
    • com.googlecode.munki.libs 5.5

Changes/fixes in v7.0.5:

• Better logging for scripts run by managedsoftwareupdate. Thanks to @MagerValp: #1294
  • 2c6a69b
  • 59eef33
  • 781b873
  • db904b7
• Managed Software Center: fix display of double-digit pending updates. Thanks to @gmarnin #1295 #1297
• Properly handle AdditionalHttpHeaders values that contain ":" characters. Thanks to @camguise. #1296
• makepkginfo: Allow --version-script to be used even if there is no installer item. Thanks to @vmiller. #1298
• Managed Software Center: On app launch, display the page of the first sidebar item (instead of assuming it is the All Software view). #1299
• makepkginfo/munkiimport: Add --uninstallpkg as another alias for --uninstalleritem. Thanks to @PeetMcK. #1300
• Logging changes/improvements:
  • Don't log errors and warnings to Apple Unified Logging twice; add logging level to messages logged to Apple Unified Logging
    • 96c5a1b
  • Fix issue with warning messages in the main log where they are prepended with 'WARNING: WARNING: ' or 'ERROR: ERROR: '
    • a612055
    • 8fe7105
• When posting a new Notification Center notification, make sure any previous notifications are removed
  • e12ae90

A complete list of changes from the 7.0.5 release is here: https://github.com/munki/munki/compare/v7.0.4..v7.0.5

New features in Munki 7:

• Managed Software Center now supports customization of the sidebar. See https://github.com/munki/munki/wiki/Customizing-Managed-Software-Center-sidebar for details. Thanks to @SteveKueng for the initial implementation.
• version_script: pkginfo items may now contain the key version_script. The expected value for this key is a string, containing a script that outputs the version number of a currently-installed version of the software, or an empty string (or exits non-zero) if the software is not currently installed. This is a new mechanism Munki can use to determine whether or not an item needs to be installed (or updated). Since it returns a version number, and Munki can use its existing version number logic, in most cases using a version_script will be superior to using an installcheck_script.
• During bootstrapping, if on A/C power or battery level is greater than 50% on Intel or greater than 30% on Apple silicon, the status app will prevent the display from going to sleep so that bootstrap progress is displayed. Thanks to @chrisgrande. (See #1215)

Munki 7 removed features:

Some features and capabilities supported by previous versions of Munki are no longer supported:

• The startosinstall installer_type, used to install macOS major upgrades on Intel Macs is no longer supported. The stage_os_installer installer_type works on both Intel and Apple silicon, and is supported in Munki 7.

• Installation of Apple software updates. Munki 6 does not install Apple updates on Apple silicon, but instead prompts the user to use Apple tools (System Settings app; softwareupdate) to do so. Munki 7 extends this behavior to Intel Macs as well.

• Apple update metadata (https://github.com/munki/munki/wiki/Pkginfo-For-Apple-Software-Updates) The installer_type apple_update_metadata is no longer supported.

• The following Adobe installer_types are no longer supported:

  • AdobeSetup
  • AdobeUberInstaller
  • AdobeAcrobatUpdater
  • AdobeCS5AAMEEPackage
  • AdobeCS5PatchInstaller
  • AdobeCCPInstaller

• Additionally, the following uninstall_methods are no longer supported:

  • AdobeSetup
  • AdobeUberUninstaller
  • AdobeCS5AAMEEPackage
  • AdobeCCPUninstaller

• To use Munki 7 to install Adobe software, use the Adobe admin console to create Apple installer packages (that Munki can install via its support for Apple installer packages).

• The installer_type profile is no longer supported. Munki 7 has no support for the installation or removal of configuration profiles, and additionally, support for configuration profile "emulation" has been removed as well. Admins should be using an MDM solution to manage configuration profiles on macOS.

• The appdmg installer_type is no longer supported (this has been deprecated for well over a decade): https://github.com/munki/munki/wiki/App-Dmg-Package-Notes

• The suppress_bundle_relocation pkginfo key is no longer supported. This only ever worked for bundle-style packages.

• The repocheck tool in the attached files ("Assets") is a basic proof-of-concept tool to analyze your Munki repo for pkginfo items that contain things no longer supported by Munki 7. There are currently no options -- it will scan whatever repo your current munkiimport preferences points to.

Middleware:

• Python middleware compatible with Munki 6 will not work with Munki 7. Several popular middleware modules have been ported to Swift using Munki 7's middleware protocol, and are believed to work:
  • https://github.com/munki/AzureStorageMiddleware
  • https://github.com/munki/BunnyNetMiddleware
  • https://github.com/munki/CloudFrontMiddleware
  • https://github.com/munki/GCSMiddleware
  • https://github.com/munki/S3Middleware

Repo plugins:

• Python repo plugins compatible with Munki 6 will not work with Munki 7. A Swift repo plugin protocol is available, and the MWA2APIRepo plugin was ported to Swift, largely as a proof-of-concept so that vendors who have incorporated Munki into their products and have written repo plugins have example code to follow.
  • https://github.com/munki/MWA2APIRepo

Preparing for Munki 7 deployment

There are likely things you as a Munki admin will need to do to prepare for deploying Munki 7 in your organization. Be sure to consult the wiki for information on how you might need to deal with the changes in Munki 7:
https://github.com/munki/munki/wiki/Munki-7-Introduction

Other notes:

• The installer package for this release contains a component package that installs the Python libraries used by Munki 6.7 (aka "munkilib"). This is intended as a transition aid. (We use Sal where I work and some of the Sal reporting scripts import code from inside munkilib). The intention would be for Munki admins to identify these sorts of dependencies and work to eliminate them.
• Installing the Munki 7 package over an existing Munki 6.x install will leave the munki-python symlink and Munki's Python.framework in place. This might be helpful while transitioning, but might also make it easier to miss dependencies on that Python. You might consider removing Munki 6's included Python to see what breaks.