PhotoDropMac 0.1.2 (deprecated — use 0.1.3)

Warning

Deprecated — superseded by 0.1.3. Please download that instead.

Concurrent ingests into the same library destroy each other's manifest in this build. Ten photodrop ingest processes started at once copied all ten files but left two manifests. (Back-to-back sequential ingests, which this release fixed, are fine.)

Signing and notarization are identical to 0.1.3 — no security or Gatekeeper difference, and nothing here is unsafe to run. It stays downloadable for reproducibility.

The files are fine — the risk is that verification silently covers fewer of them. A manifest-based verify reports success over whatever records survive, so it prints ✓ All 2 files … and exits 0 for a ten-file library. Check the count it reports against what you actually have. Every copied file also carries its own checksum as an extended attribute, independent of any manifest:

photodrop verify <library> --xattr

Libraries written by this version remain fully valid, and 0.1.3 verifies them unchanged.

---

Fixes a manifest-durability bug: two ingests finishing in the same second overwrote each other's manifest.

Upgrading is a straight replace — drag the new app over the old one. Existing libraries, manifests, presets, and settings are untouched.

The fix

A job's manifest and log are named ingest-<timestamp>, and that timestamp only resolved to seconds. Manifests are written atomically, meaning a same-second collision caused the second job to silently replace the first job's manifest.

That mattered because a manifest is the only record of what a job copied and at what checksum — losing one loses the ability to verify those files later. Two ingests landing in the same second is easy to hit with small cards.

Timestamps now include milliseconds (ingest-20260806-093823-074.json). Verified with the shipped build: three back-to-back ingests inside a single second produce three manifests, and all three jobs' records verify.

The timestamp format also moved into one place, so the manifest and log filenames cannot drift apart.

Nothing to do for existing libraries. Manifests written by 0.1.0 and 0.1.1 keep verifying exactly as before; only the filename of newly written ones changes.

Requirements

macOS 14.0 or later. Unsandboxed by design — it needs arbitrary card→destination filesystem access and calls diskutil to eject cards.

Verifying this download

SHA-256  f06b82ab3a8442cdf0d0f724637750a353d17685638b4014726b992439502db3
         PhotoDropMac-0.1.2.dmg

shasum -a 256 PhotoDropMac-0.1.2.dmg
xcrun stapler validate PhotoDropMac-0.1.2.dmg
xcrun stapler validate /Applications/PhotoDropMac.app
spctl -a -t exec -vvv /Applications/PhotoDropMac.app   # → source=Notarized Developer ID

Full changelog: v0.1.1...v0.1.2