chore: release 26.0.69

Disable app-sandbox to allow Sparkle auto-updates to work properly.
Keep entitlements file structure for future sandbox re-enablement.
Sandbox integration with Sparkle requires more complex authorization
setup that can be tackled later when preparing for App Store.

NOTES.md

@@ -6,4 +6,4 @@
 add a marker for "reboot required"
 
                     
-
+1112

Sparkle/appcast.xml

@@ -3,28 +3,28 @@
     <channel>
         <title>iKeyMon</title>
         <item>
-            <title>26.0.60</title>
+            <title>26.0.69</title>
-            <pubDate>Tue, 30 Dec 2025 19:50:41 +0100</pubDate>
+            <pubDate>Sat, 03 Jan 2026 14:00:40 +0100</pubDate>
-            <sparkle:version>132</sparkle:version>
+            <sparkle:version>150</sparkle:version>
-            <sparkle:shortVersionString>26.0.60</sparkle:shortVersionString>
+            <sparkle:shortVersionString>26.0.69</sparkle:shortVersionString>
             <sparkle:minimumSystemVersion>15.2</sparkle:minimumSystemVersion>
-            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.60/iKeyMon-26.0.60.zip" length="2993467" type="application/octet-stream" sparkle:edSignature="ZqB6FBJnHyjGDhqVhZ85BdUbcVyfFvQUd7MT7/kiFNcQFV06xtZ0VbkBgU+JQKJz+skgg9m0YjgTbG0tZhgwDg=="/>
+            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.69/iKeyMon-26.0.69.zip" length="2993457" type="application/octet-stream" sparkle:edSignature="cIqWamcPRsxA7zPaGcUuUOqLYs5KTcoAgXQkhblCF+Wc2tEnGHFVysARtMH68jGq7ObfhDuI3oZJNg857rQ0Dg=="/>
         </item>
         <item>
-            <title>26.0.59</title>
+            <title>26.0.68</title>
-            <pubDate>Tue, 30 Dec 2025 19:42:28 +0100</pubDate>
+            <pubDate>Sat, 03 Jan 2026 13:52:33 +0100</pubDate>
-            <sparkle:version>130</sparkle:version>
+            <sparkle:version>148</sparkle:version>
-            <sparkle:shortVersionString>26.0.59</sparkle:shortVersionString>
+            <sparkle:shortVersionString>26.0.68</sparkle:shortVersionString>
             <sparkle:minimumSystemVersion>15.2</sparkle:minimumSystemVersion>
-            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.59/iKeyMon-26.0.59.zip" length="2993219" type="application/octet-stream" sparkle:edSignature="0a+7eU506MOwVCvhWvQ/7l5LOTJ3N8xRoBCCnoZk/PwBmLXA7PxoJQ0owC+mxN7Yz8EVIdLBRfYweqG3i1hCAw=="/>
+            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.68/iKeyMon-26.0.68.zip" length="2993469" type="application/octet-stream" sparkle:edSignature="M5WBkO4BN8RwMJ0ZU3Ku4CyQllnbEzz9X6MYR4IVX5prO9oyMBGoceHA3C97wZA6+++9u7RnRsKrFvei2CsWBQ=="/>
         </item>
         <item>
-            <title>26.0.58</title>
+            <title>26.0.67</title>
-            <pubDate>Tue, 30 Dec 2025 19:36:28 +0100</pubDate>
+            <pubDate>Sat, 03 Jan 2026 13:36:29 +0100</pubDate>
-            <sparkle:version>128</sparkle:version>
+            <sparkle:version>146</sparkle:version>
-            <sparkle:shortVersionString>26.0.58</sparkle:shortVersionString>
+            <sparkle:shortVersionString>26.0.67</sparkle:shortVersionString>
             <sparkle:minimumSystemVersion>15.2</sparkle:minimumSystemVersion>
-            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.58/iKeyMon-26.0.58.zip" length="2993175" type="application/octet-stream" sparkle:edSignature="LwsVJJa6ibPNFN04K5g41lZjrGPhBszCIefY34atBdsNqDhW2ZuapTlgxoWWi7j2wt7CMJf/fDBJUEhdI71zDQ=="/>
+            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.67/iKeyMon-26.0.67.zip" length="2993400" type="application/octet-stream" sparkle:edSignature="kr7vKMSM0002I/Fx2KVFGqNA6uMHb5Ll6Cr8NSG+8/Ct6KkC9dAwcd50xeUVPVJ7UT8lNBVPoBjZoFssgIEPAw=="/>
         </item>
     </channel>
 </rss>

iKeyMon.entitlements

@@ -3,16 +3,12 @@
 <plist version="1.0">
 <dict>
 	<key>com.apple.security.app-sandbox</key>
-	<true/>
+	<false/>
 	<key>com.apple.security.network.client</key>
 	<true/>
-	<key>com.apple.security.xpc.aConnectionServices</key>
+	<key>com.apple.security.files.downloads.read-write</key>
-	<array>
+	<true/>
-		<string>com.sparkle-project.InstallerConnection</string>
+	<key>com.apple.security.files.user-selected.read-write</key>
-	</array>
+	<true/>
-	<key>com.apple.security.xpc.aStatusServices</key>
-	<array>
-		<string>com.sparkle-project.InstallerStatus</string>
-	</array>
 </dict>
 </plist>

iKeyMon.xcodeproj/project.pbxproj

@@ -322,7 +322,7 @@
 				CODE_SIGN_ENTITLEMENTS = iKeyMon.entitlements;
 				CODE_SIGN_STYLE = Automatic;
 				COMBINE_HIDPI_IMAGES = YES;
-				CURRENT_PROJECT_VERSION = 132;
+				CURRENT_PROJECT_VERSION = 150;
 				DEVELOPMENT_ASSET_PATHS = "\"Preview Content\"";
 				DEVELOPMENT_TEAM = Q5486ZVAFT;
 				ENABLE_HARDENED_RUNTIME = YES;
@@ -337,7 +337,7 @@
 					"$(inherited)",
 					"@executable_path/../Frameworks",
 				);
-				MARKETING_VERSION = 26.0.60;
+				MARKETING_VERSION = 26.0.69;
 				PRODUCT_BUNDLE_IDENTIFIER = net.24unix.iKeyMon;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SWIFT_EMIT_LOC_STRINGS = YES;
@@ -353,7 +353,7 @@
 				CODE_SIGN_ENTITLEMENTS = iKeyMon.entitlements;
 				CODE_SIGN_STYLE = Automatic;
 				COMBINE_HIDPI_IMAGES = YES;
-				CURRENT_PROJECT_VERSION = 132;
+				CURRENT_PROJECT_VERSION = 150;
 				DEVELOPMENT_ASSET_PATHS = "\"Preview Content\"";
 				DEVELOPMENT_TEAM = Q5486ZVAFT;
 				ENABLE_HARDENED_RUNTIME = YES;
@@ -368,7 +368,7 @@
 					"$(inherited)",
 					"@executable_path/../Frameworks",
 				);
-				MARKETING_VERSION = 26.0.60;
+				MARKETING_VERSION = 26.0.69;
 				PRODUCT_BUNDLE_IDENTIFIER = net.24unix.iKeyMon;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SWIFT_EMIT_LOC_STRINGS = YES;

scripts/build_release.sh

@@ -159,6 +159,14 @@ if [[ ! -d "$APP_PATH" ]]; then
 fi
 
 if [[ -n "${CODESIGN_IDENTITY:-}" ]]; then
+  echo "🔏 Codesigning Sparkle framework..."
+  codesign \
+    --force \
+    --options runtime \
+    --timestamp \
+    --sign "$CODESIGN_IDENTITY" \
+    "$APP_PATH/Contents/Frameworks/Sparkle.framework"
+
   echo "🔏 Codesigning app with identity: $CODESIGN_IDENTITY"
   codesign \
     --deep \

version.json

@@ -1,3 +1,3 @@
 {
-  "marketing_version": "26.0.60"
+  "marketing_version": "26.0.69"
 }