Munki 6.6.5 Official Release

This is the official release of Munki 6.6.5: a bug-fix and enhancement release of the Munki tools.

Fixes and enhancements

• Authorized restarts: Wait longer for a response from the authrestartd process so we do not timeout too soon: 41e4a5c
• Client certificate authentication: consider certificate chains when using client certificates for authentication. Thanks to @liamn #1235 and #1236
  A complete list of changes from the 6.6.4 release is here: v6.6.4...v6.6.5

Known issues

Downgrading from 6.6.x to 6.4.2 or earlier

If you install a version of the Munki tools that contains the Python 3.12 framework, and then later attempt to downgrade by installing an older version of the Munki tools (say, 6.4.2.4634) that contains a Python 3.10 (or earlier) framework, /usr/local/munki/munki-python will be broken. See https://github.com/munki/munki/wiki/Downgrading-Munki-tools for more information.

Upgrading Munki with Munki

If you use a technique similar to the one described here to allow Munki to update itself without requiring a restart, be sure to mark the Munki 6.6.x launchd item as an unattended_install. If you don't do that, Munki may not be able to update itself completely without user involvement.
See this post: https://groups.google.com/g/munki-discuss/c/ikIw2mPddM0/m/h95J_DyrCwAJ for more details.

Autopkg recipes here for "munkitools6" have been updated to just install the package as-is, which is the current recommendation.

Additional Information

Build info

The GUI apps and the Python framework were built under Xcode 16.2 on macOS 15.3.1. Builds should work on Xcode 14.3.1 through Xcode 16.2, but these other versions of Xcode have not been tested and may cause different results. (Due to Apple bugs, Xcode 15.0.1 or Xcode 15 on macOS Sonoma will result in GUI apps that won't run on macOS < 10.15).

OS version support

This release should work on macOS 10.13 through macOS 15, though it gets little-to-no testing on versions prior to macOS 13. Please report issues you find with older macOS versions.

Package versioning

• Distribution package version: 6.6.5.4711
• munki core tools version: 6.6.5.4711
• LaunchAgents/LaunchDaemons version: 6.6.0.4656
• Apps package version: 6.6.3.4707
• Python package version: 3.12.2.4689

Attachment info

The munkitools-6.6.5.4711.pkg attachment available here is an unsigned and unnotarized package that should install without requiring a restart . It should be suitable for most deployment scenarios, including those driven by DEP/ADE (if you first sign the package). It does not include a component to trigger "bootstrapping" or any other automatic run of the tools after installation.

Signed/notarized builds

Thanks to the efforts of @erikng and @natewalck, signed and notarized builds of Munki tools packages are available at https://github.com/macadmins/munki-builds/releases.
The build corresponding to this release is here: https://github.com/macadmins/munki-builds/releases/tag/v6.6.5.4711

Deprecation notes

The following Munki features are considered deprecated and will be removed in a future Munki release:

• Bundled Python: a future release of Munki will remove all dependency on Python and will no longer include a bundled version of Python.
• Installation of Apple software updates. Munki currently does not install Apple updates on Apple silicon, but instead prompts the user to use Apple tools (Settings app; softwareupdate) to do so. A future release will extend this behavior to Intel Macs as well.
• Special support/treatment of Adobe Creative Cloud packages (and other special Adobe installer types). The following installer_types will no longer be supported: AdobeSetup, AdobeUberInstaller, AdobeAcrobatUpdater, AdobeCS5AAMEEPackage, AdobeCS5PatchInstaller, AdobeCCPInstaller Additionally, the following uninstall_methods will no longer be supported: AdobeSetup, AdobeUberUninstaller, AdobeCS5AAMEEPackage, AdobeCCPUninstaller
• Support for configuration profile install and removal (https://github.com/munki/munki/wiki/Managing-Configuration-Profiles). Installer_type profile will no longer be supported.
• Apple update metadata (https://github.com/munki/munki/wiki/Pkginfo-For-Apple-Software-Updates) Installer_type apple_update_metadata will no longer be supported.
• appdmg installer_type (this has been deprecated for years, but support will be removed in the near future): https://github.com/munki/munki/wiki/App-Dmg-Package-Notes
• suppress_bundle_relocation pkginfo key. This only ever worked for bundle-style packages. Bundle-style packages are no longer supported as of macOS Sequoia, and so support for this feature will be dropped in a future release of Munki.