v2.0.0

2.0.0 (2025-04-04)

• feat!: bump engines to Node.js >=22.12.0 (#352) (929ed18), closes #352

BREAKING CHANGES

• Bumps required Node.js version to >=22.12.0.
• This module is now ESM-only.
• The exported sign, walk, and flat functions are now Promise-based (signAsync, walkAsync, and flatAsync have been removed).

v1.3.3

1.3.3 (2025-03-05)

Bug Fixes

• strictVerify not working with true value (#345) (087ddb6)

v1.3.2

1.3.2 (2024-12-31)

Bug Fixes

• flat: don't use pkgbuild for MAS distributions (#340) (a5bf4d4)

v1.3.1

1.3.1 (2024-07-04)

Bug Fixes

• flat: use pkgbuild to bundle pre/postinstall scripts (#282) (51531f1)

v1.3.0

1.3.0 (2024-05-15)

Features

• add support for and document --deep for subresources (#316) (4e9ffce)

v1.2.0

1.2.0 (2024-04-22)

Features

• export walkAsync, correcting type definition comments around requirements (#311) (e05e008)

v1.1.0

1.1.0 (2024-03-20)

Features

• adding support for specifying per-file requirements as a string (#310) (7f7934f)

v1.0.5

1.0.5 (2023-08-18)

Bug Fixes

• export SignOptions type (#274) (01bd4c2)
• only apply preAutoEntitlements to top-level app bundle (#292) (06b32b5)

v0.4.11

This is a minor patch introducing support for the hardened runtime (introduced in Mojave), with a plist dependency security update.

Added:

• --hardened-runtime option to pass to codesign enabling hardened runtime (#176).

Security:

• Fix plist dependency vulnerability (#175).

v0.4.10

Due to a release issue with v0.4.9 on npm (#165), please use v0.4.10 instead though there being no activity on the repo.