Repository navigation
Releases: bridgepatcher/BridgePatcher
Release list
4.0.0.2000000 - 4.0.0 pre-alpha 1 for alpha 20
This version:
renames OpenCore Legacy Patcher T2 to BridgePatcher. One of the reasons for this rename is that it confuses users that this is Dortania’s official project and open issues inside the wrong repository. Attackers would love this patcher to be called OpenCore Legacy Patcher T2 to exploit for impersonation and malware delivery, I already documented a case where attackers intentionally confused users that this is Dortania’s official project to deliver malware over a malvertising website.
replaces Dortania’s icons with our own ones
now includes the license of the patcher inside the binary itself
fixes a bug where the bundle ID inside OpenCore-Patcher-GUI is hardcoded, so upon launch it did never trusted even the patcher's own helper tool
the user agent the patcher sends when downloading Kernel Debug Kits, Metallibs and the AppleDB catalog, and when fetching the release notes of an update, now ends in BridgePatcher/ instead of OpenCoreLegacyPatcherT2/. The rest of the user agent stays the same
all API and link endpoints (updates, PatcherSupportPkg, Metallibs, project status, website, Help menu, OpenCore update script) now point at the renamed GitHub organization bridgepatcher
the app’s interface (windows, dialogs, menus, notifications) now says BridgePatcher instead of OpenCore Legacy Patcher T2
the app itself is now called BridgePatcher.app (executable BridgePatcher, previously OpenCore-Patcher-T2.app), also in /Applications, and the administrator password prompts say BridgePatcher. The install folder (/Library/Application Support/albert-mueller/OpenCore-Patcher-T2), the log folder and the launch service names stay the same, so settings, logs and background services carry over. When updating, the old OpenCore-Patcher-T2.app and its /Applications link are removed, and the auto patcher, macOS update and OS caching services are pointed at the new app
the installer is now BridgePatcher.pkg. Versions from before the rename only look for OpenCore-Patcher-T2.pkg when checking for updates, so releases can also carry OpenCore-Patcher-T2.pkg: the same installer under the old name (built with Build-Project.command --legacy-installer), which additionally keeps a link under the old app name so the updater of those versions recognises the finished update. The updater now prefers BridgePatcher.pkg and falls back to OpenCore-Patcher-T2.pkg for releases from before the rename
the bundle ID is now io.github.bridgepatcher.bridgepatcher (previously io.github.albert-mueller.opencore-legacy-patcher-t2) and the privileged helper is now io.github.bridgepatcher.privileged-helper. The old helper is removed when installing or uninstalling
also replaces the build icon and the drive icons (internal, external, SSD, SD card) with our own artwork, and replaces Apple’s System Settings icon with our own Settings icon
the About screen no longer loads an image from Dortania’s servers
removes the analytics and crash reporting inherited from Dortania’s OpenCore Legacy Patcher. The patcher no longer contains any code that sends information about your Mac (hashed system UUID, app and macOS version, Mac model, GPUs, firmware vendor and the country set in System Settings) to an analytics server, and the "Allow Reporting" setting is gone. Leftover reporting settings from older versions are removed on launch, the build scripts no longer embed an analytics key or server, and the privacy policy has been updated accordingly
the Help menu no longer links to the Discord server; support is now offered through GitHub Discussions and GitHub Issues of this project
the copyright notice now updates its end year automatically and credits Dortania and the OpenCore Legacy Patcher contributors alongside this fork
In the repository:
the former name OpenCore Legacy Patcher T2 / OCLP-T2 is now treated as a typosquat: repositories that are not GitHub forks but still use the former name, and websites using it in their address (including .github.io), are flagged. The former address oclp-t2.github.io is always marked as a typosquat, and former official addresses are only reported once they serve content again
forks still named OpenCore-Legacy-Patcher-T2 are asked to rename
the SHA256SUMS workflow now waits for BridgePatcher.pkg (or OpenCore-Patcher-T2.pkg on older releases) before hashing, and fails if an installer attached to the release is missing from SHA256SUMS
License Guard now detects Dortania’s OCLP icon and Apple’s System Settings icon as well as images hotlinked from Dortania’s servers, and automatically closes pull requests from forks that add license violations
the duplicate issue check now skips issues opened by workflow bots
README: removes Dortania’s logo and the Discord server, and links to GitHub Discussions for community support
4.0.0.1900019 - 4.0.0 alpha 19.19
I have a critical warning to you: as of the time of writing, attackers have set up a malicious website called https://en.soydemac.com/ that tricks into that Dortania has added support for unsupported T2 Macs and tricks people into believing that this project is Dortania's official one to launch SEO poisoning attacks. Also, that website is full of fake news. Also, that webstie is also a malvertising website whose ads deliver from phishing websites to malware payloads that hijack your search engine to an attacker controlled search engine. More here: https://oclp-t2.github.io/issues/599.html on this patcher's page or #599 in GitHub.
This release brings new root patches from Dortania's upstream OpenCore Legacy Patcher, thx @Jazzzny, EduCovas and Dortania:
- adds root patches for Intel GMA X3100 graphics (MacBook4,1) on macOS Big Sur and newer (ported from Dortania 436ded0f)
- adds new non-metal patches: QuartzCore is now patched on macOS Big Sur and newer (ported from Dortania 828e3124)
- adds patched screen savers and wallpaper extensions for non-metal Macs (Drift, Hello, Monterey, Ventura, Macintosh and Sequoia wallpapers) (ported from Dortania 71036963)
- MacBook4,1 support is limited to root patching (GMA X3100 graphics, backlight and audio patches, ported from Dortania ad5b5df7). Building OpenCore for the MacBook4,1 is not supported: its audio needs Dortania's modified AppleALC 1.6.3, which is not compatible with OpenCore 1.0.8. Building can return once a much newer AppleALC supports this model
- PatcherSupportPkg is updated to 2.11
- on T2 Macs, updates T2TahoeFixup.kext to 1.0.17, adding shadow BuildManifest.plist deployment to writable /private/tmp and automatic vnode_lookup redirection when in-place vn_rdwr write fails with EROFS (30) on read-only installer volumes, resolving MobileSoftwareUpdate Error -81 during Stage 2, thx @Medelcartelinc #623
- now, in the repository, if you have just a question rather than an issue, or AI could help you fix that issue, you can also use /ai after opening the issue to get an answer from AI instead of waiting for a human
- the patcher now also checks for updates in the background, at login and every 6 hours, even when it is not open. The check runs silently and only opens the patcher when a newer build is found; the update is then offered or installed exactly as on a normal launch (snooze, "Turn Off Auto Updates", mandatory updates after an expired snooze or a dead service all apply). It is skipped while the patcher is already open, and no analytics are sent for it. This is installed by the PKG as a LaunchAgent (com.albert-mueller.opencore-legacy-patcher.update-check) and removed again by the uninstaller
- brings bug fixes from Dortania's upstream OpenCore Legacy Patcher, thx @Jazzzny, @dhinakg and Dortania:
- fixes Safari/WebKit crashes on Macs older than Sandy Bridge (no AVX): the JavaScriptCore AVX patch is now applied through RestrictEvents (
revpatch=jsc), replacing the removed root patch. This also covers Macs without a Wi-Fi card on macOS Sonoma and newer, which never got the old root patch (ported from Dortania aec949a)- RestrictEvents is updated to 1.1.7 (rolling build of acidanthera/RestrictEvents b70aaa4,
javascriptcorebranch, same build Dortania ships; there is no tagged 1.1.7 release yet). RestrictEvents is still not injected on T2 Macs
- RestrictEvents is updated to 1.1.7 (rolling build of acidanthera/RestrictEvents b70aaa4,
- fixes the dual CPU kernel panic on MacPro3,1 and Xserve2,1 on macOS Sequoia and newer with a new kernel patch that fixes the CPU startup ordering. The "MacPro3,1/Xserve2,1 Workaround" setting (cpus=4) is removed as it is no longer needed, so all CPU threads can be used again (ported from Dortania 5e311e35)
- enables the PCI bus enumeration patch on all Macs whose last supported macOS is older than OS X El Capitan (ported from Dortania 7eae823f)
This release also fixes a vulnerability, too:
- updates are enforced when an online service the patcher depends on is gone for good (PatcherSupportPkg downloads, Metallib catalog, KDK catalog, AppleDB, the project website, Gemini help). Once one of these services has been unreachable for more than 24 hours (the server answers 404/410/451, the domain no longer resolves, or its certificate is invalid), updates behave exactly as if the snooze period had ended, for as long as the service stays gone: a running snooze is ended and can't be renewed, "Turn Off Auto Updates" is ignored (the setting itself is kept), and the next update is installed automatically and can't be cancelled. A notice explains why. The main repository is not part of this check. Users who are simply offline are never affected: github.com has to be reachable first, and timeouts and server errors are ignored. Once every affected service is reachable again, the user's update settings apply again
- Impact: a dead service breaks older builds, and an abandoned domain or account can be registered by someone else and used to serve malicious content to every older installation. The fix always ships as an update, which users with snoozed or disabled updates would otherwise never receive. That is why these settings are ignored in this case instead of being honored