Follow-up to #119 / PR #120. Run 32017 showed the ad-hoc signing step works (frameworks now carry a cdhash), but the test host still crashed: Xcode 14.2 keeps -o runtime (hardened runtime) when signing ad-hoc, so library validation is active and rejects the framework for having no Team ID.
The DISABLE_LIBRARY_VALIDATION build setting added in #120 never injected com.apple.security.cs.disable-library-validation into the generated .xcent on Xcode 14.2 — the processed entitlements only contained device.usb + get-task-allow.
Fix: dedicated Resources/ICCery.Debug.entitlements (base entitlements + com.apple.security.cs.disable-library-validation), wired via CODE_SIGN_ENTITLEMENTS in the Debug config only; file excluded from bundle resources. Release config still uses ICCery.entitlements with full library validation.
Verified locally: Debug app signature now contains the entitlement (codesign -d --entitlements shows disable-library-validation); build-for-testing + test-without-building runs all 339 ICCeryCoreTests green after signing the package frameworks.
Follow-up to #119 / PR #120. Run 32017 showed the ad-hoc signing step works (frameworks now carry a cdhash), but the test host still crashed: Xcode 14.2 keeps `-o runtime` (hardened runtime) when signing ad-hoc, so library validation is active and rejects the framework for having `no Team ID`.
The `DISABLE_LIBRARY_VALIDATION` build setting added in #120 never injected `com.apple.security.cs.disable-library-validation` into the generated `.xcent` on Xcode 14.2 — the processed entitlements only contained `device.usb` + `get-task-allow`.
Fix: dedicated `Resources/ICCery.Debug.entitlements` (base entitlements + `com.apple.security.cs.disable-library-validation`), wired via `CODE_SIGN_ENTITLEMENTS` in the Debug config only; file excluded from bundle resources. Release config still uses `ICCery.entitlements` with full library validation.
Verified locally: Debug app signature now contains the entitlement (`codesign -d --entitlements` shows `disable-library-validation`); `build-for-testing` + `test-without-building` runs all 339 ICCeryCoreTests green after signing the package frameworks.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Follow-up to #119 / PR #120. Run 32017 showed the ad-hoc signing step works (frameworks now carry a cdhash), but the test host still crashed: Xcode 14.2 keeps
-o runtime(hardened runtime) when signing ad-hoc, so library validation is active and rejects the framework for havingno Team ID.The
DISABLE_LIBRARY_VALIDATIONbuild setting added in #120 never injectedcom.apple.security.cs.disable-library-validationinto the generated.xcenton Xcode 14.2 — the processed entitlements only containeddevice.usb+get-task-allow.Fix: dedicated
Resources/ICCery.Debug.entitlements(base entitlements +com.apple.security.cs.disable-library-validation), wired viaCODE_SIGN_ENTITLEMENTSin the Debug config only; file excluded from bundle resources. Release config still usesICCery.entitlementswith full library validation.Verified locally: Debug app signature now contains the entitlement (
codesign -d --entitlementsshowsdisable-library-validation);build-for-testing+test-without-buildingruns all 339 ICCeryCoreTests green after signing the package frameworks.