ITMS-90158

I encountered the same issue. I received an email from Apple stating that the app was rejected due to ITMS-91061: Missing privacy manifest in third-party SDKs. The list of affected SDKs is as follows: https://developer.apple.com/support/third-party-SDK-requirements.

Do you have the complete report to see the list of dependencies? The error message 'ITMS-91061: Missing privacy manifest' indicates that your iOS app is missing the necessary privacy manifest files for certain features you are using in your app. The privacy manifest files are required to disclose how your app uses sensitive user data, such as location, contacts, photos, etc. In your case it seems like is a third party library. Third-party frameworks also require a privacy manifest and signature. It seems like your report is asking for the privacy manifest for GoogleDataTransport that may be a dependency. Check all their dependencies for GoogleToolboxForMac. https://developer.apple.com/support/third-party-SDK-requirements/ Please refer to the link provided above. The library you are currently using, GoogleToolboxForMac as well as GoogleDataTransport, is included in the list. It seems by the error that could be one of the dependencies. Do you have the complete report? The third-party library you receiv

Same Here ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseCore.framework/FirebaseCore”, which includes FirebaseCore, an SDK that was identified in the documentation as a commonly used third-party SDK. If a new app includes a commonly used third-party SDK, or an app update adds a new commonly used third-party SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.

Using JWT token generated by following these steps , I successfully uploaded .ipa via iTMSTransporter on Linux using the following command as described here sudo /usr/local/itms/bin/iTMSTransporter -m upload -o ~/Desktop/mylogFile.log -jwt myGeneratedJWT -v eXtreme -assetFile AppName.ipa -assetDescription AppStoreInfo.plist

This is the altool command -> FAILURE xcrun altool --verbose --list-providers -u USERNAME --password APPLICATION_PASS 2025-01-28 11:54:56.589 Verbose logging enabled. 2025-01-28 11:54:56.591 Will look for transporter at executable bundle relative path: /Applications/Xcode.app/Contents/SharedFrameworks/ContentDeliveryServices.framework/itms/bin/iTMSTransporter 2025-01-28 11:54:56.591 Looking for Transporter at path: /Applications/Xcode.app/Contents/SharedFrameworks/ContentDeliveryServices.framework/itms/bin/iTMSTransporter 2025-01-28 11:54:56.591 Looking for Transporter at path: /Applications/Xcode.app/Contents/Developer/usr/bin/../SharedFrameworks/ContentDeliveryServices.framework/itms/bin/iTMSTransporter 2025-01-28 11:54:56.591 Looking for Transporter at path: /Applications/Xcode.app/Contents/Developer/usr/bin/../itms/bin/iTMSTransporter 2025-01-28 11:54:56.591 Looking for Transporter at path: /Applications/Transporter.app/Contents/itms/bin/iTMSTransporter 2025

After upload got a mail from AppStoreConnect 'ITMS-91109: Invalid package contents - The package contains one or more files with the com.apple.quarantine extended file attribute'. Indeed in the past xcode complained about such files, like images saved from Photoshop that have extended attributes. Easily removed with 'xattr -c'. But, if this is an issue to send us emails about AFTER upload, then please have xcode check this BEFORE upload.. I had 3000+ such images.