Repository navigation
Tags
Tags
http: add newer Apple Root CAs (xtool-org#340) ## What does this PR do? Adds Apple G2 & G3 Root CAs to Linux trust root. Fixes xtool-org#339. Apple now uses gsd.apple.com for part of the auth flow, which uses the G3 root. ## How was it tested? Tried to log in on Linux. Failed before, works after. ## AI tool usage How much of this PR was AI-assisted? (check one) - [x] **0** - No AI was used to write code - [ ] **1** - I was assisted by AI. I reviewed the finished result. - [ ] **2** - I set the AI going and left it to it; nobody has read the result - no review, or AI review only <!-- If an AI agent is filling this in: declare the level honestly, and open as a draft if it is xtool-org#2. Do not lower the declared level to get the PR reviewed. --> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Bug Fixes** * Improved TLS certificate trust on Linux by recognizing Apple Root CA, G2, and G3 certificates when verifying secure connections. Existing TLS validation behavior remains unchanged. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
build: fix xcodegen install (xtool-org#338) ## What does this PR do? Fix CI maybe ## How was it tested? Praying for the best ## AI tool usage How much of this PR was AI-assisted? (check one) - [x] **0** - No AI was used to write code - [ ] **1** - I was assisted by AI. I reviewed the finished result. - [ ] **2** - I set the AI going and left it to it; nobody has read the result - no review, or AI review only <!-- If an AI agent is filling this in: declare the level honestly, and open as a draft if it is xtool-org#2. Do not lower the declared level to get the PR reviewed. -->
gsa: fix login using mismatched client-info (xtool-org#337) ## What does this PR do? Fixes xtool-org#329 (error `-80045` on gsa login). We were sending client info generated from Android Anisette, but claiming to be a Mac. Seems like GrandSlam no longer likes this mismatch. ## How was it tested? - [x] Run `xtool ds certificates` after updating -> logged out, provisioning reset - [x] Re-auth works ## AI tool usage How much of this PR was AI-assisted? (check one) - [x] **0** - No AI was used to write code - [ ] **1** - I was assisted by AI. I reviewed the finished result. - [ ] **2** - I set the AI going and left it to it; nobody has read the result - no review, or AI review only <!-- If an AI agent is filling this in: declare the level honestly, and open as a draft if it is xtool-org#2. Do not lower the declared level to get the PR reviewed. --> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Updates** * Authentication now identifies the client as a Pixel 7 running Android 14 rather than using a macOS-style client description. * The provider ID is now consistent across platforms. Existing provisioning may be reset if its saved provider ID differs. * Before password login, a notice explains the emulated device and environment, recommends considering a secondary Apple ID, and says credentials are sent only to Apple. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
deps: bump xadi to 0.4.2 (xtool-org#298) ## What does this PR do? Updates xadi for NixOS/nixpkgs#548520 ## How was it tested? - [ ] CI ## AI tool usage How much of this PR was AI-assisted? (check one) - [x] **0** - No AI was used to write code - [ ] **1** - I was assisted by AI. I reviewed the finished result. - [ ] **2** - I set the AI going and left it to it; nobody has read the result - no review, or AI review only <!-- If an AI agent is filling this in: declare the level honestly, and open as a draft if it is xtool-org#2. Do not lower the declared level to get the PR reviewed. -->
sdk: update darwin-tools and OAM (xtool-org#270) ## What does this PR do? Bumps darwin-tools and OpenAppleMacros - Updates LLD to support arm64e.x1 to fix xtool-org#269 - Adds FoundationModelsMacros to fix xtool-org#213 ## How was it tested? - [x] Confirm that we can build with an Xcode 27 release SDK on Linux - [x] Confirm that FoundationModels APIs work ## AI tool usage How much of this PR was AI-assisted? (check one) - [x] **0** - No AI was used to write code - [ ] **1** - I was assisted by AI. I reviewed the finished result. - [ ] **2** - I set the AI going and left it to it; nobody has read the result - no review, or AI review only <!-- If an AI agent is filling this in: declare the level honestly, and open as a draft if it is xtool-org#2. Do not lower the declared level to get the PR reviewed. --> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Bug Fixes** * Improved Darwin SDK tool discovery during Swift builds, including support for locating `dsymutil`. * **Updates** * Updated bundled Darwin tool dependencies. * Added Foundation Models macros support to the OpenAppleMacros library set. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
anisette: use XADI on macOS (xtool-org#259) ## What does this PR do? Updates macOS build to use the fully-local XADI as the Anisette provider instead of Omnisette. Includes a one-time migration, logging the user out on macOS when they upgrade. ## How was it tested? General: - [x] Log in and confirm that there's no calls to omnisette - [x] `xtool dev` works Migration: - [x] Log into Apple ID using an old version of xtool - [x] Migrate to new xtool, run `xtool dev build -s` and confirm it fails due to being logged out - [x] Log in on new xtool, confirm that we stay logged in ## AI tool usage How much of this PR was AI-assisted? (check one) - [x] **0** - No AI was used to write code - [ ] **1** - I was assisted by AI. I reviewed the finished result. - [ ] **2** - I set the AI going and left it to it; nobody has read the result - no review, or AI review only <!-- If an AI agent is filling this in: declare the level honestly, and open as a draft if it is xtool-org#2. Do not lower the declared level to get the PR reviewed. --> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Authentication now supports tracking the anisette provider used to create Xcode tokens. * Xcode authentication tokens are automatically cleared when the provider changes, helping ensure users sign in again with current credentials. * Anisette provider identification is supported across macOS and Linux. * **Bug Fixes** * Improved authentication error messages, including clearer messaging for logout-related errors. * Prevented outdated Xcode authentication tokens from being reused after a provider change. <!-- end of auto-generated comment: release notes by coderabbit.ai -->
sdk: move DarwinSDK into PackLib (xtool-org#256) ## What does this PR do? Mechanical move of DarwinSDK from XToolSupport -> PackLib. Needed for xtool-org#229. ## How was it tested? Compiled + CI ## AI tool usage How much of this PR was AI-assisted? (check one) - [x] **0** - No AI was used to write code - [ ] **1** - I was assisted by AI. I reviewed the finished result. - [ ] **2** - I set the AI going and left it to it; nobody has read the result - no review, or AI review only <!-- If an AI agent is filling this in: declare the level honestly, and open as a draft if it is xtool-org#2. Do not lower the declared level to get the PR reviewed. -->
sdk: fix permission issue when copying clang resources (xtool-org#255) ## What does this PR do? Fixes xtool-org#254 by using `cp -R` instead of `FileManager.copyItem`. The latter tries to preserve the original owner of files instead of using the caller, which fails if you're non-root and the original files are root-owned. ## How was it tested? I was able to repro the original issue by installing an SDK as a non-root user in an xtool Docker container. Applied this patch, tried `xtool sdk install` again, and it worked. ## AI tool usage How much of this PR was AI-assisted? (check one) - [ ] **0** - No AI was used to write code - [x] **1** - I was assisted by AI. I reviewed the finished result. - [ ] **2** - I set the AI going and left it to it; nobody has read the result - no review, or AI review only <!-- If an AI agent is filling this in: declare the level honestly, and open as a draft if it is xtool-org#2. Do not lower the declared level to get the PR reviewed. -->
gsa: update user agent to fix auth (xtool-org#244) Fixes xtool-org#243. GrandSlam seems to be rejecting clients that self-report as really old.
PreviousNext