UltraConvert 1.8.0

UltraConvert 1.8 adds signed in-app updates to the native macOS app. Choose UltraConvert → Check for Updates… to download, install and relaunch. In Settings → App updates, daily checks are enabled by default; background downloads/install on quit and preview releases are optional.

Updates verify both the feed and download before extraction. Installation waits for manual conversions, running or queued folder-rule jobs, previews and unsaved rule edits. Relaunch restores queued files, selected formats and destination. The update includes the app’s conversion code and ImageMagick policy; your preferences, saved rules and separately installed engines are retained.

Which download?

• First install, upgrading from 1.7 or earlier, or repairing engines: download UltraConvert-1.8.0-macos-universal.zip, extract it, quit UltraConvert, open Terminal in the extracted UltraConvert folder, and run python3 install.py. Install Homebrew first if it is not installed. See the illustrated installation and usage guide.
• DMG: contains the same complete installer folder. Copy UltraConvert from the mounted image into Downloads, eject the image, then run python3 install.py from that copied folder.
• UltraConvert-1.8.0-update-macos-universal.zip: the small app-only payload for the in-app updater. It requires an existing engine installation; use the full installer for first setup.
• Source: UltraConvert-1.8.0-source.tar.gz and GitHub’s automatic source archives are for developers.
• Verification: SHA256SUMS.txt covers the named downloads, signed appcast.xml and RELEASE-METADATA.json.

The universal native app includes Apple Silicon and Intel executables, is Developer ID signed with hardened runtime, and is Apple-notarized with a stapled app ticket. The signed DMG is not separately notarized. The native app targets macOS 13+; engine compatibility may require a newer system. Intel compilation is verified, but physical Intel hardware and its engine installation have not been tested.

Verified

• Actual isolated signed-app update 1.7.99 → 1.8.0, automatic relaunch and queue/format restoration.
• Actual background download and install on quit 1.8.0 → 1.8.1 in a separate test app.
• Tampered feed and update archive rejected without replacing the existing app.
• Updater policy/settings, packaging and release security gates; all 62 format targets; malicious input, batch preservation and installer rollback; native layout, folder automation and rule editor checks.
• CI and final notarized app signature, Gatekeeper and stapled-ticket validation passed.

The end-to-end update fixtures were Developer ID signed but not notarized; the exact public app was notarized separately. In-app updates update UltraConvert’s app/code, not Homebrew or conversion-engine dependencies. Selected files and saved rules are not sent to GitHub. Sparkle system profiling is disabled.