5.0.0

What's Changed

• docs: serialize host-intensive validation by @rudrankriyam in #2248
• feat(validate): add deterministic metadata content and URL checks by @rudrankriyam in #2238
• Add deterministic local IPA installation for a connected iOS device by @rudrankriyam in #2245
• Add read-only xcode toolchain doctor by @rudrankriyam in #2239
• feat(signing): sync multiple targets in one push by @rudrankriyam in #2246
• feat(xcode): add first-class local test execution by @rudrankriyam in #2240
• docs(signing): document encrypted identity workflows by @rudrankriyam in #2250
• feat(signing): add sync password rotation by @rudrankriyam in #2255
• feat(signing): add target-selective sync pull by @rudrankriyam in #2254
• Add persistent signing keychain installation by @rudrankriyam in #2256
• feat(signing): sync direct distribution identities by @rudrankriyam in #2257
• docs(signing): design opt-in entitlement claim rebasing by @rudrankriyam in #2258
• docs: document individual API keys and missing web command surfaces by @rudrankriyam in #2306
• build(deps): bump aws-sdk-go-v2/service/s3 from 1.107.3 to 1.110.0 by @rudrankriyam in #2312
• fix(web privacy): fail closed when publication state is unknown by @rudrankriyam in #2309
• fix(testflight): decode object-form app-testers dimensions by @rudrankriyam in #2316
• fix(testflight): document groups list app-endpoint fields and --build-id conflicts by @rudrankriyam in #2311
• fix(web privacy): fail closed on unrepresentable remote usages by @rudrankriyam in #2317
• fix(web subscriptions): verify monthly-commitment prices after write by @rudrankriyam in #2307
• ci: run internal/rootfs tests on native Windows and Darwin runners by @rudrankriyam in #2305
• feat(web): list Xcode Cloud workflows for a product by @rudrankriyam in #2308
• feat(web): validate API key P8 as PKCS#8 and warn on unknown roles by @rudrankriyam in #2313
• fix(web): paginate review readers and keep included rejection context by @rudrankriyam in #2310
• feat(web apps create): support Full/Limited access at creation time by @rudrankriyam in #2315
• Verify web app deletion against server state by @rudrankriyam in #2314
• docs(signing): document encryption, revocation, and remaining CI failure modes by @rudrankriyam in #2324
• docs: map remaining parity areas and record non-goals by @rudrankriyam in #2325
• test(profiles,certificates): verify sparse fieldsets combined with includes by @rudrankriyam in #2326
• Add read-only web api-keys list and view by @rudrankriyam in #2327
• apps wall: add Padlok - Keypad manager by @Dean151 in #2262
• apps wall: add AI Sound Effects: Audio Studio by @z-stack0393 in #2318
• test(signing): stabilize GitStore cancellation tests under host load by @rudrankriyam in #2331
• fix(analytics): return usage exit code 2 for invalid flag values by @rudrankriyam in #2304
• feat(capabilities): inventory the current asc web surface by @rudrankriyam in #2334
• ci(release): retry WinGet submission calls on GitHub rate limits by @rudrankriyam in #2321
• test(cmd): compare blocked telemetry timing to collector hold by @rudrankriyam in #2332
• fix(web): require --confirm and skip no-op writes in bundle-ids sync-app-clip by @rudrankriyam in #2320
• feat(web agreements): accept multiple agreements and download agreement content by @rudrankriyam in #2323
• feat(web): add app-groups delete, unassign, and set by @rudrankriyam in #2322
• fix(web privacy): keep DATA_NOT_COLLECTED as a representable remote declaration by @rudrankriyam in #2343
• fix(web review): drop appStoreVersionExperimentV2 from the iris items include by @rudrankriyam in #2344
• feat(web apps): add distribution method, last-compatible version, and app status history reads by @rudrankriyam in #2336
• fix(web api-keys): document case-insensitive --role matching by @rudrankriyam in #2345
• feat(xcode-cloud): add workflows duplicate on the public API by @rudrankriyam in #2340
• feat(subscriptions): add plan-availability show and set by @rudrankriyam in #2341
• fix(gamecenter,encryption,iap): return usage exit code 2 for invalid flag values by @rudrankriyam in #2348
• fix(search): prioritize release dashboard status queries by @rudrankriyam in #2264
• feat(web): read App Store Regulations & Permits declarations by @rudrankriyam in #2337
• fix(subscriptions,pricing,testflight,webhooks): return usage exit code 2 for invalid flag values by @rudrankriyam in #2352
• docs(capabilities): record the tax category and Transaction Tax report gaps by @rudrankriyam in #2349
• fix(web): retry fresh login when post-2FA session bootstrap returns 401 by @rudrankriyam in #2303
• apps wall: add Authenticator app - 2FA, MFA by @Mokshsuthar in #2342
• fix(apps,builds,product-pages,reviews): return usage exit code 2 for invalid flag values by @rudrankriyam in #2353
• fix(account,ids,distribution,xcode-cloud): return usage exit code 2 for invalid flag values by @rudrankriyam in #2354
• feat(web): read app-scoped resolution center threads and drafts by @rudrankriyam in #2338
• fix(web privacy): make apply resilient to mid-sequence failures and stale catalog tokens by @rudrankriyam in #2335
• fix(certificates): drop invalid certificate types and validate --certificate-type by @rudrankriyam in #2350
• feat: package Apple push certificates as protected PKCS#12 identities by @rudrankriyam in #2243
• fix(web): start the request timeout after interactive authentication by @rudrankriyam in #2359
• feat(web): shared Developer Portal session layer with explicit team selection by @rudrankriyam in #2346
• docs(sandbox): record current private create request shape by @rudrankriyam in #2357
• docs(subscriptions): explain adjusted-equalizations command split by @rudrankriyam in #2356
• fix(versions): preserve downloadable response state by @rudrankriyam in #2360
• feat(xcode): add deterministic project signing plan/apply by @rudrankriyam in #2244
• feat: add bounded screenshot matrix capture by @rudrankriyam in #2247
• fix(search): route remaining intent follow-ups by @rudrankriyam in #2358
• fix(web): make stale-session compare-and-delete atomic and backend-scoped by @rudrankriyam in #2362
• fix(web apps): read territoryAvailabilities for the delete preflight by @rudrankriyam in #2347
• fix(xcode): re-resolve staged signing settings by @rudrankriyam in #2259
• Retire asc web apps last-compatible-version and add versions update --downloadable by @rudrankriyam in #2371
• fix(xcode): treat entitlement symlink inspection errors as artifact-alias failures by @rudrankriyam in #2376
• fix(xcode): compose identical inherited conditional entitlement expressions through the local base by @rudrankriyam in #2379
• feat(signing): safely re-sign IPA artifacts by @rudrankriyam in #2241
• feat(rootfs): add identity-coupled file mutations by @rudrankriyam in #2261
• feat!: remove every CLI-side deprecation for 5.0.0 by @rudrankriyam in #2404
• fix: address 5.0.0 review follow-ups for setup spellings and builds help by @rudrankriyam in #2405
• feat(notarization): staple and validate tickets locally by @rudrankriyam in #2242
• feat(signing): rebase allowlisted team claims by @rudrankriyam in #2260
• docs: require a clean review loop before PR readiness by @rudrankriyam in #2406
• signing resign: tighten profile authorization patterns by @rudrankriyam in #2389
• feat(signing): rebase App Clip relationship claims by @rudrankriyam in #2402
• fix(xcode): resolve implicit project-location build settings in signing by @rudrankriyam in #2386
• fix(xcode): inherit raw xcconfig settings below PBX by @rudrankriyam in #2401
• feat(web): add web auth session export and import by @rudrankriyam in #2339
• fix(web): serialize keychain session mutations and cache generations by @rudrankriyam in #2394
• docs(web): document public TestFlight ID lookup by @rudrankriyam in #2388
• docs(signing): document entitlement remediation error detail by @rudrankriyam in #2391
• test(web privacy): record verified app data usage patch by @rudrankriyam in #2387
• fix signing resign container entitlement preservation by @rudrankriyam in #2390
• signing resign: traverse preserved trees through rooted handles by @rudrankriyam in #2392
• fix(rootfs): preserve special permission bits by @rudrankriyam in #2393
• xcode: retain descriptor-backed source identity through version commit by @rudrankriyam in #2395
• docs: add Victus to Wall of Apps by @jaketheclawbot in #2410
• fix(xcode): preserve xcconfig comment state across continuations by @rudrankriyam in #2397
• apps wall: add I Need That Widget: Calendar by @imjhk03 in #2409
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.37 to 1.33.2 by @dependabot[bot] in #2411
• feat(web xcode-cloud): manage next build number by @rudrankriyam in #2407
• feat(web xcode-cloud): inspect version aliases by @rudrankriyam in #2408
• fix(xcode): bound signing source graphs by @rudrankriyam in #2398
• fix(xcode): block changed shared signing fallbacks by @rudrankriyam in #2399
• fix(signing): preflight IPA central directories by @rudrankriyam in #2400
• feat(web): add read-only Developer Portal Bundle ID discovery by @rudrankriyam in #2396
• feat(web): restore removed app records by @rudrankriyam in #2403
• ci: extend full-module lint timeout by @rudrankriyam in #2414
• chore(deps): bump github.com/bitrise-io/go-utils/v2 from 2.0.0-alpha.38 to 2.0.0-alpha.39 by @dependabot[bot] in #2413
• fix(rootfs): preserve identity guarantees during quarantine cleanup by @rudrankriyam in #2415
• test(signing): verify App Clip claims in nested signed bundles by @rudrankriyam in #2416
• fix(rootfs): detect ACL and extended attribute identity drift by @rudrankriyam in #2417
• Protect inherited entitlement inputs before writing signing artifacts by @rudrankriyam in #2418
• docs: clarify agent authorization and completion rules by @rudrankriyam in #2431
• Test competing writes during web session import by @rudrankriyam in #2419
• Document verified reverse privacy identity updates by @rudrankriyam in #2420
• Add team and individual API-key revocation by @rudrankriyam in #2421
• Add Xcode Cloud version-alias management by @rudrankriyam in #2422
• Add individual API-key creation with recoverable key files by @rudrankriyam in #2423
• Support affirmative regional medical-device declarations by @rudrankriyam in #2424
• Add confirmed text replies to App Review conversations by @rudrankriyam in #2425
• Clarify agent authority and workflow completion by @rudrankriyam in #2436
• apps wall: add NullVault: Secret Photo Vault by @nevedel in #2434
• docs(bundle-ids): clarify wildcard identifiers and platform normalization by @rudrankriyam in #2433
• Add application tax-category management by @rudrankriyam in #2426
• Add experimental Website Push ID listing by @rudrankriyam in #2427
• Add confirmed app distribution settings updates by @rudrankriyam in #2428
• Add Services ID lifecycle commands by @rudrankriyam in #2429
• Add confirmed sandbox tester deletion by @rudrankriyam in #2430
• feat(web): list visible and hidden iCloud containers by @rudrankriyam in #2435
• feat(web): import and validate web sessions from CI by @rudrankriyam in #2432
• fix(web): reconcile uncertain Apple write responses by @rudrankriyam in #2437
• feat(web): generate and download Transaction Tax reports by @rudrankriyam in #2438
• feat(web): manage unsent App Review drafts by @rudrankriyam in #2439
• feat(web): update regional medical device declarations by @rudrankriyam in #2440
• fix(web): reject mismatched app tax category resources by @rudrankriyam in #2441
• feat(web): add verified Website Push ID lifecycle by @rudrankriyam in #2442
• feat(web): disable Private Cloud Compute with verified readback by @rudrankriyam in #2443
• fix(web): verify distribution identity and reconcile request timeouts by @rudrankriyam in #2444
• feat(web): read app transfer status by @rudrankriyam in #2445
• feat(web): manage in-app purchase tax categories by @rudrankriyam in #2446
• feat(web): inspect Xcode Cloud SCM connection status by @rudrankriyam in #2447
• feat(web): manage custom-distribution Apple Account recipients by @rudrankriyam in #2448

New Contributors

• @z-stack0393 made their first contribution in #2318
• @Mokshsuthar made their first contribution in #2342
• @jaketheclawbot made their first contribution in #2410
• @imjhk03 made their first contribution in #2409
• @nevedel made their first contribution in #2434

Full Changelog: 4.11.0...5.0.0