Releases: nowsecure/node-applesign
Releases · nowsecure/node-applesign
2.5.0
- Add -A, --all-dirs option to pack everything, not just Payload/
- Never throw in session for proper finalization
- Avoid renaming app groups if -c and -m are passed (#74)
- Avoid signing bitcode-only ipas
- Make insert_dylib warning fit in one line
2.4.0
- Implement -a,--all to resign all binaries even if not referenced
- Alphabetically sort internal config options
- Add -H/--allow-http to inject NSAppTransportSecurity.NSAllowsArbitraryLoads=true
2.3.1
- Fix issues reported by semistandard
- Upgrade mocha to fix 6 vulnerabilities reported by
npm audit
- Add try/catch around readFileSync for filterLibraries (fixes regression introduced in c29d4bc)
2.3.0
- Fix problem with apps with lot of large filenames, exceeding the execProgram maxBuffer
- No maxBuffer is used at all
- Stdin fd is closed to avoid hangs when unzip aims to interact with the user because of truncated zip files
- Added -O (--osversion) flag to force a specific MinimumOSVersion
- Add --noclean (-n) flag to not remove the temporary files created by the resigning process
- Skip signing non-referenced binaries. (makes yalu and liberios IPAs happy)
2.2.0
- Update plist and simple-plist dependencies
- Fix #45 - Refactor Applesign constructor to support async initialization to call findInPaths
- Fix #70 - Specify minimum NodeJS version required
- Massage even more entitlements
codename: Orphaned Injections
This release comes with some interesting bug fixes related to the support of library injection and the resigning of IPAs containing orphaned libraries.
- Library injection now uses an absolute filesystem path that is accessible via USB on non-jailbroken devices and can be used to deploy the blobs.
- The injected library is always chmodded as executable
- IPAs may contain libraries that are not referenced by any other bin, those ones, the orphaned has been ignored since now, producing invalid IPAs according to installd.
Enjoy!
1.1.0
- Fix race condition in --insert dylib command
- Suffix temporary directory with UUID.v4
1.0.0
- verify no symlinks are found inside the ipa
- entitlements mangling is not enabled by default (api change)
- confirmed that -I works to insert libraries
- add —version commandline flag
- updated example and README
0.8.2
- Fix entitlements massaging
- Add -E to use generic entitlements
- Better --force-family and fix --entitlements
- Fix #26 - Expose signFile API accessible via --single
- Add --force-family to force iPhone UIDeviceFamily, old -f is now -u --unfair