8000 Harden external TestFlight distribution by shroominic · Pull Request #29 · shroominic/OpenGlucose · GitHub
[go: up one dir, main page]

Skip to content

Harden external TestFlight distribution - #29

Merged
shroominic merged 5 commits into
mainfrom
fix/testflight-external-release
Aug 14, 2026
Merged

shroominic merged 5 commits into
mainfrom
fix/testflight-external-release

Conversation

@shroominic
Copy link
Copy Markdown
Owner

Summary

  • add a fail-closed external TestFlight path for build 18
  • pin the closed NS audience by immutable group ID and exact tester-set digest
  • allow only the unavoidable automatic internal team group plus NS, with zero individual testers
  • use explicit manual App Store signing and require APP_STORE_ELIGIBLE artifacts
  • revalidate audience immediately before the one-shot external notification
  • expand notification receipts with the approved audience evidence

Verification

  • full make check passed, including Flutter/Dart analysis and tests, Android/Web/iOS builds, and native iOS tests
  • TestFlight policy, signing-contract, and notification-receipt tests passed
  • ShellCheck and git diff checks passed

Rollout

This PR does not upload or notify testers. External release remains gated on the privacy hardening PR, build 18, App Store beta review, and the Account Holder export-compliance determination.

@shroominic
shroominic merged commit 6741284 into main Aug 14, 2026
9 checks passed
@shroominic
shroominic deleted the fix/testflight-external-release branch August 14, 2026 00:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

0