feat: add support for individual API keys (Xcode 26 supported feature) #246
+21
−15
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Xcode 26 supports using an individual API key for notarization. The only difference is that when using an individual API key, you mustn't include the issuer ID, or else it will throw a 401 error. This library currently requires that
--issuer-idbe passed, so I've changed it so it's an optional parameter. I've also updated the README + JSDocs to document this.Of course you're probably wanting an authoritative source for this, and that would be the man pages for notarytool.
Here is the man page when using Xcode 16:
Here is the man page when using Xcode 26:
For the sake of documenting explicitly: you can change what version of the Command Line Tools you're using (so you can see the different man pages) in the Xcode preferences:
I've also attached a video where I attempt to sign an executable with an individual API key on both Xcode 16 and 26 (you'll see 16 fails but it works with 26):
Screenshot.2025-06-21.at.02.10.21.mp4