I'm submitting my first macOS app (a native SwiftUI menu bar app, signed with Developer ID Application certificate, Hardened Runtime enabled) for notarization using xcrun notarytool submit with keychain profile authentication. All 9 of my submissions have been stuck at In Progress for up to 16 hours. None have transitioned to Accepted or Invalid. Logs are unavailable for all of them (notarytool log returns Submission log is not yet available). Environment macOS: 26.2 (25C56) Xcode: 26.1.1 (17B100) notarytool: 1.1.0 (39) App: Native SwiftUI, universal binary (x86_64 + arm64), ~2.2 MB DMG Bundle ID: com.gro.ask Team ID: 4KT56S2BX6 What I've verified Code signing is valid: $ codesign --verify --deep --strict GroAsk.app passes with no errors $ codesign -dvvv GroAsk.app Authority=Developer ID Application: Jack Wu (4KT56S2BX6) Authority=Developer ID Certification Authority Authority=Apple Root CA CodeDirectory flags=0x10000(runtime) # Hardened Runtime enabled Runtime Version=26.1.0 Format=app bundle with Mach-O uni
Search results for
missing package product
51,794 results found
Selecting any option will automatically load the page
Post
Replies
Boosts
Views
Activity
Even in Xcode 26.3 (Xcode 26.3 Release Candidate Apple silicon.xip) from 2026/Feb/03 the DDI Files for ios 26.x are still missing. No one can work for weeks now. Well done.
Topic:
Developer Tools & Services
SubTopic:
Xcode
Tags:
[quote='875131022, IHadToChooseAUserNameAndIdidntWantTo, /thread/809959?answerId=875131022#875131022, /profile/IHadToChooseAUserNameAndIdidntWantTo'] Are there public APIs to assess notarization? [/quote] That’s tricky, because it depends on your definition of API. The codesign tool has a --check-notarization operation that does that. See Testing a Notarised Product and the codesign man page. While that’s documented, I’m not a fan of using command-line tools as APIs. The code signing requirement language has the notarized constraint. That’s not documented where it should be but it’s debatable whether that’s just because the parent document is stuck in the Documentation Archive. Annoyingly, an equivalent constraint has not been added to the LightweightCodeRequirements framework. If you think that’d be useful, I encourage you to file an enhancement request for it. And if you do, please post your bug number, just for the record. Share and Enjoy — Quinn “The Eskimo!” @ Developer Technical Support @ Apple
Topic:
Code Signing
SubTopic:
Notarization
Tags:
a I am submitting this appeal because we believe our app was misunderstood and the review outcome and follow-up communication have been unfair and mechanically handled. 1) What happened / Outcome we disagree with Our submission was rejected under Guideline 4.8 – Design – Login Services, with the reviewer stating that our app uses a third-party login service but does not provide an equivalent login option that meets Apple’s requirements (limited data collection, private email option, no advertising tracking without consent). However, our game does not require or force any third-party login. The feature being treated as “login” is not a login service at all—it is Mainland China real-name / anti-addiction compliance verification. 2) Why we believe we comply with the App Review Guidelines A. The feature in question is compliance verification, not login Players do not need to create or log into any in-game account to play. The flow exists solely to satisfy Mainland China real-name/anti-addiction compliance require
Topic:
Privacy & Security
SubTopic:
Sign in with Apple
I filed FB21890081 about missing API to distinguish between a BGContinuedProcessingTask expiring from user interaction vs the system.
Topic:
App & System Services
SubTopic:
Processes & Concurrency
Tags:
Hello everyone, I’m facing a confusing issue in App Store Connect and hoping someone here has encountered this before. Context: • Company developer account (UK-based) • App is free to download • Only optional In-App Purchases (Apple IAP) • No external payments • Using standard App Store distribution • Paid Apps agreement is active • US tax forms (W-8BEN-E) are active Issue: Under Agreements → Tax Forms, I see: United Kingdom Tax Info – Alternative Terms Addendum – Missing Tax Info However: • There is no Alternative Terms Addendum visible under Agreements • I have not intentionally opted into EU DMA Alternative Terms • I do not have a UK VAT number (Apple should be Merchant of Record under standard IAP) Finance Support says they do not support Alternative Terms. Agreements support has not responded yet. Questions: 1. Can the Alternative Terms flag exist only under Tax Forms without a visible agreement? 2. How can a developer revert back to standard App Store terms if this happens? 3. Has anyone had Ap
Topic:
App Store Distribution & Marketing
SubTopic:
App Store Connect
I've asked Gemini. It says the following. To answer your question directly: Yes, you absolutely need the Privacy keys in your Info.plist. Even though you are only using the user’s location to show a blue dot on the map, Apple considers the act of calling requestWhenInUseAuthorization() a request for private data. If that key is missing, your app will not only be rejected, it will likely crash the moment it executes that line of code on a real device.
Topic:
App & System Services
SubTopic:
Maps & Location
Tags:
Part 1... However, a subsequent call to ivars->fResponseMap->GetAddress() returns NULL (0x0). Subsequent call when? The expectation (and what our driver does) is that you'd immediately call GetAddress() and then basically never look at the map again. In one of our drivers, that never is quite literal. The code is basically: IOMemoryMap *memoryMap = NULL; if ( parallelCommandIOMemoryDescriptor->CreateMapping(0, 0, 0, 0, 0, &memoryMap) == kIOReturnSuccess ) { ivars->fCommandAddress = memoryMap->GetAddress(); } ... if ( parallelResponseIOMemoryDescriptor->CreateMapping(0, 0, 0, 0, 0, &memoryMap) == kIOReturnSuccess ) { ivars->fParallelResponseAddress = memoryMap->GetAddress(); } ...and, yes, that code leaks two IOMemoryMap's. I don't know what the exact thinking was, but I suspect they realized that the only reason that mapping would ever become invalid/useless was because the driver was being torn down, so freeing doesn't really matter. I'll admit, there is a certain charm to tha
Topic:
App & System Services
SubTopic:
Drivers
Tags:
Thank you for your question. I recommend providing a focused sample project, such as the image Image(“playerJersey_red”), which we will all be missing. I will need to replace it with a different image. Regarding the dropDestination cellContent, I understand that you define it, but it would be beneficial to have a sample that can be executed quickly and shared with others for verification. I think it is possible to have a view enabled as a drop destination but disabled as a draggable source based on certain conditions. The issue you're encountering with the .disabled modifier affecting both dragging and dropping could be because it disables all user interactions for the view. Instead, you should conditionally apply the .draggable modifier only when there is a player available? Use content.player.map { $0 } to provide a value only when player is not nil. This makes the view draggable only if a player exists and should keep the .dropDestination modifier without any conditions since you want all cells to
Topic:
UI Frameworks
SubTopic:
SwiftUI
Tags:
Same here, there is nothing more frustrating than having a finished product ready to go, only to be held up by a black box administrative delay.
Topic:
Community
SubTopic:
Apple Developers
Tags:
Oh, and I forgot to mention a couple of random caveats for the old hardware model technique I explained in the previous post: By bringing up a new OS on an old hardware model VM, you miss out on various features. Indeed, that’s kinda the point, in that you want to ‘miss out’ on the new-style provisioning UDIDs. However, there are other features, like using iCloud, that you might actually miss. And it’s not hard to imagine that list growing in the future. And speaking of the future, there’s no guarantee that this technique will work forever. I can imagine a world where a macOS NN guest simply won’t run on older hardware model VMs. Or that a old hardware model might stop being supported by the macOS host. You can detect the latter with isSupported, but the former is likely to result in either the OS failing to install or the OS not booting once it is installed. So, your default path should be to create your VM in the standard way, as illustrated by the Running macOS in a virtual machi
Topic:
App & System Services
SubTopic:
Core OS
Tags:
Hi Quinn, I followed your steps and the profile dump is as below. It has com.apple.developer.payment-pass-provisioning => 1 : { AppIDName => XC com s_ _ _ _ _ _ d ApplicationIdentifierPrefix => [ 0 => 2 _ _ _ _ _ _ 7 ] CreationDate => 2026-02-05 15:09:44 +0000 DER-Encoded-Profile => {length = 3857, bytes = 0x30820f0d 06092a86 4886f70d 010702a0 ... 73b0c49b eb3ffec9 } DeveloperCertificates => [ 0 => {length = 1487, bytes = 0x308205cb 308204b3 a0030201 02021007 ... b474d99f 14730350 } ] Entitlements => { application-identifier => 2 _ _ _ _ _ _ 7.com.s _ _ _ _ _ _ d aps-environment => production beta-reports-active => 1 com.apple.developer.associated-domains => com.apple.developer.in-app-payments => [ 0 => merchant.com.s_ _ _ _ _ _ d ] com.apple.developer.networking.slicing.appcategory => [ 0 => communication-9000 1 => games-6014 2 => streaming-9001 ] com.apple.developer.networking.slicing.trafficcategory => [ 0 => defaultslice-1 1 => vi
Topic:
Code Signing
SubTopic:
Entitlements
Tags:
I’m having an issue verifying a domain for a Merchant ID. I’m implementing Apple Pay on the web for a demo, and I’ve configured the Azure server to match Apple’s requirements for domain verification, such as the TLS configuration, not requiring client certificates, and ensuring there are no redirects. I’ve run tests with OpenSSL and PowerShell and all responses return HTTP/1.1 200 OK. I also tested the URL Apple says it uses to validate the file under .well-known, and it does show the expected result. I already have the Apple Pay Payment Processing Certificate and the Apple Pay Merchant Identity Certificate approved; the only thing missing is the domain verification. I’m not sure what else to test—if you could help me with a possible solution, I’d really appreciate it. (The project is built in .NET 8 and hosted on Azure App Service.)
My app is already in production, and there are purchases. But people from Europe cannot download it because I need to pass DSA compliance. The DSA regulation status has been “in review” for about a month already. What do I need to do?
Topic:
App Store Distribution & Marketing
SubTopic:
App Store Connect
We are experiencing notarization submissions that remain in the “In Progress” state for an extended period (over 24 hours), with no status transition and no submission log available. This is occurring in an automated CI environment using the Notary REST API (non-interactive submission and polling). Re-submitting the same package only results in additional submissions also stuck in “In Progress”. There does not appear to be any API mechanism to cancel, clear, or expire these submissions once they are created. We have already opened an Apple Developer Support case regarding this issue (Case ID: 102818066745 & 102819008943), but have not yet received clarification on what is causing these long-running “In Progress” states. This issue is impacting our production release pipeline, as we are unable to reliably complete notarization for signed packages within an expected timeframe. Based on other reports in this forum (including thread 811968), this behavior appears similar to cases wh
Topic:
Code Signing
SubTopic:
Notarization