Sparkle ��� mac os

Sparkle ��� mac os

If your app already has an older version of Sparkle or you wish to migrate to Sparkle 2.0 beta, see upgrading from previous versions.

Note sandboxed applications are only supported in Sparkle 2.

1. Add the Sparkle framework to your project

• In your Xcode project: File › Swift Packages › Add Package Dependencies
• Enter https://github.com/sparkle-project/Sparkle as the package repository URL
• Choose the Package Options. The default options will let Xcode automatically update versions of Sparkle 1.

From Xcode’s project navigator, if you right click and show the Sparkle package in Finder, you will find Sparkle’s tools and Sparkle 2’s XPC Services in ../artifacts/Sparkle/

• Add pod ‘Sparkle’ to your Podfile.
• Add or uncomment use_frameworks! in your Podfile.

If you want to add Sparkle manually:

• Get the latest version of Sparkle.
• Link the Sparkle framework to your app target:
  • Drag Sparkle.framework into the Frameworks folder of your Xcode project.
  • Be sure to check the “Copy items into the destination group’s folder” box in the sheet that appears.
  • Make sure the box is checked for your app’s target in the sheet’s Add to targets list.
• Make sure the framework is copied into your app bundle:
  • Click on your project in the Project Navigator.
  • Click your target in the project editor.
  • Click on the General tab.
  • In Frameworks, Libraries, and Embedded Content section, change Sparkle.framework to Embed & Sign .
• In Build Settings tab set “ Runpath Search Paths ” to @loader_path/../Frameworks (for non-Xcode projects add the flags -Wl,-rpath,@loader_path/../Frameworks ). This is not a necessary step in recent versions of Xcode.
• If you have your own process for copying/packaging your app make sure it preserves symlinks!

Sparkle 2 beta pre-releases are also available on GitHub. They are available in Swift Package Manager and CocoaPods too by specifying the pre-release version in your project’s manifest.

A more nightly build from our repository can be downloaded from our GitHub Actions page by selecting a recent workflow commit and downloading the Sparkle-distribution*.tar.xz artifact. Alternatively, you may clone Sparkle’s repository with all its submodules, run make release , and extract the binaries in the resulting Sparkle-*.tar.xz (or .bz2 ) archive.

Sandboxed applications using Sparkle 2 require additional setup.

2. Set up a Sparkle updater object

These instructions are for regular .app bundles. If you want to update a non-app bundle, such as a Preference Pane or a plug-in, follow step 2 for non-app bundles.

• Open up your MainMenu.xib.
• Choose View › Utilities › Object Library.
• Type “Object” in the search field under the object library (at the bottom of the right sidebar) and drag an Object into the left sidebar of the document editor.
• Select the Object that was just added.
• Choose View › Utilities › Identity Inspector .
• Type SUUpdater in the Class box of the Custom Class section in the inspector.
• If you’d like, make a “ Check for Updates. ” menu item in the application menu; set its target to the SUUpdater instance and its action to checkForUpdates: .

If you are using Sparkle 2, SUUpdater is a deprecated stub. While it is still functional for transitional purposes, new applications will want to use SPUStandardUpdaterController in the above steps instead.

Sparkle can also be instantiated and set up programmatically.

3. Segue for security concerns

Since Sparkle is downloading executable code to your users’ systems, you must be very careful about security. To let Sparkle know that a downloaded update is not corrupted and came from you (instead of a malicious attacker), we recommend:

• Serve updates over HTTPS.
  • Your app will not update on macOS 10.11 or later unless you comply with Apple’s App Transport Security requirements. HTTP requests will be rejected by the system.
  • You can get free certificates from Let’s Encrypt, and test server configuration with ssltest.
• Sign the application via Apple’s Developer ID program.
• Sign the published update archive with Sparkle’s EdDSA (ed25519) signature.
  • Updates using Installer package ( .pkg ) must be signed with EdDSA.
  • Binary Delta updatesmust be signed with EdDSA.
  • Updates of preference panes and pluginsmust be signed with EdDSA.
  • Updates to regular application bundles that are signed with Apple’s Developer ID program are strongly recommended to be signed with EdDSA for better security and fallback. Sparkle now deprecates not using EdDSA for these updates.

EdDSA (ed25519) signatures

To prepare signing with EdDSA signatures:

Run ./bin/generate_keys tool (from the Sparkle distribution root). This needs to be done only once. This tool will do two things:

• It will generate a private key and save it in your login Keychain on your Mac. You don’t need to do anything with it, but don’t lose access to your Mac’s Keychain. If you lose it, you may not be able to issue any new updates!
• It will print your public key to embed into applications. Copy that key (it’s a base64-encoded string). You can run ./bin/generate_keys again to see your public key at any time.

Then add your public key to your app’s Info.plist as a SUPublicEDKey property.

Here is an example run of ./bin/generate_keys :

You can use the -x private-key-file and -f private-key-file options to export and import the keys respectively when transferring keys to another Mac. Otherwise we recommend keeping the keys inside your Mac’s keychain. Be sure to keep them safe and not lose them (they will be erased if your keychain or system is erased).

Please visit Migrating to EdDSA from DSA if you are still providing DSA signatures so you can learn how to stop supporting them.

Apple code signing

If you are code-signing your application via Apple’s Developer ID program, Sparkle will ensure the new version’s author matches the old version’s. Sparkle also performs shallow (but not deep) validation for testing if the new application’s code signature is valid.

• Note that embedding the Sparkle.framework into the bundle of a Developer ID application requires that you code-sign the framework and its helper tools with your Developer ID keys. Xcode should do this automatically if you create an archive via Product › Archive and Distribute App choosing Developer ID method of distribution.
• You can diagnose code signing problems with codesign —deep -vvv —verify

for code signing validity, spctl -a -t exec -vv

for Gatekeeper validity, and by checking logs in the Console.app. See Apple’s Code Signing in Depth for more code signing details.

If you both code-sign your application and include a public EdDSA key for signing your update archive, Sparkle allows issuing a new update that changes either your code signing certificate or your EdDSA keys. Note however this is a last resort and should only be done if necessary (like if you lose access to one of them or need to change keys).

4. Distributing your App

We recommend distributing your app in Xcode by creating a Product › Archive and Distribute App choosing Developer ID method of distribution. Using Xcode’s Archive Organizer will ensure Sparkle’s helper tools are code signed properly for distribution.

If you distribute your app as a Apple-certificate-signed disk image (DMG):

• Add an /Applications symlink in your DMG, to encourage the user to copy the app out of it.
• Make sure the DMG is signed with a Developer ID and use macOS 10.11.5 or later to sign it (an older OS may not sign correctly). Signed DMG archives are backwards compatible.

If you distribute your app as a ZIP or a tar archive (due to app translocation):

• Avoid placing your app inside another folder in your archive, because copying of the folder as a whole doesn’t remove the quarantine.
• Avoid putting more than just the single app in the archive.

If your app is running from a read-only mount, you can encourage (if you so desire) your user to move the app into /Applications. Some frameworks, although not officially sanctioned here, exist for this purpose. Note Sparkle will not by default automatically disturb your user if an update cannot be performed.

Sparkle supports updating from DMG, ZIP archives, tarballs, and installer packages. While you can generally reuse the same archive for distribution of your app on your website, Sparkle favors some formats for serving updates more efficiently and reliably.

For Sparkle, tarballs and ZIPs are fastest and most reliable. DMG are slowest. Installer packages should be used only if absolutely necessary (e.g. kernel extensions).

5. Publish your appcast

Sparkle uses appcasts to get information about software updates. An appcast is an RSS feed with some extra information for Sparkle’s purposes.

• Add a SUFeedURL property to your Info.plist ; set its value to a URL where your appcast will be hosted, e.g. https://yourcompany.example.com/appcast.xml . We strongly encourage you to use HTTPS URLs for the appcast.
• Note that your app bundle must have a properly formatted CFBundleVersion key in your Info.plist .

If you update regular app bundles and you have set up EdDSA signatures, you can use a tool to generate appcasts automatically:

Build your app and compress it (e.g. in a DMG/ZIP/tar.bz2 archive), and put the archive in a new folder. This folder will be used to store all your future updates.

Run generate_appcast tool from Sparkle’s distribution archive specifying the path to the folder with update archives. Allow it to access the Keychain if it asks for it (it’s needed to generate signatueres in the appcast).

The tool will generate the appcast file (using filename from SUFeedURL ) and also *.delta update files for faster incremental updates. Upload your archives, the delta updates, and the appcast to your server.

When generating the appcast, if an .html file exists with the same name as the archive, then it will added as the releaseNotesLink .

You can also create the appcast file manually (not recommended):

• Make a copy of the sample appcast included in the Sparkle distribution.
• Read the sample appcast to familiarize yourself with the format, then edit out all the items and add one for the new version of your app by following the instructions at Publishing an update.

6. Test Sparkle out

• Use an older verison of your app, or if you don’t have one yet, make one seem older by editing Info.plist and change CFBundleVersion to a lower version.
  • A genuine older version of the app is required to test delta updates, because Sparkle will ignore the delta update if the app doesn’t match update’s checksum.
  • Editing CFBundleVersion of the latest version of the app is useful for testing the latest version of Sparkle framework.
• Run the app, then quit. Sparkle doesn’t ask the user about updates until the second launch, in order to make your users’ first-launch impression cleaner.
• Run the app again. The update process should proceed as expected.

Update process will be logged to Console.app . If anything goes wrong, you should find detailed explanation in the log.

Next steps

That’s it! You’re done! You don’t have to do any more. But you might want to:

Источник

Sparkle Pro 2.8.11

Sparkle создана специально для веб-дизайна и строительства веб-сайтов и даёт полный визуальный контроль над всем.
Если вы когда-нибудь занимались ручным кодированием веб-сайтов, вы потратили много часов, чтобы выяснить, как вы могли бы выровнять элементы страницы так же, как вы хотели, или выяснить, почему некоторые браузеры не отображают содержимое. Все это является проблемой в прошлом, вы можете рассчитывать на Sparkle и создадите современный и великолепный сайт, который воспроизведёт ваши идеи.

Sparkle берет на себя все подробности создания современной веб-страницы, в том числе:

• бесплатные макеты страниц
• веб-шрифты
• графика
• видео вложение
• подвижные макеты
• Статистика

И добавляет некоторые большие инструменты для обеспечения согласованности веб-сайта:

• объект привязки и сетки
• единая цветовая палитра
• стили шрифтов
• нижний колонтитулы

Version 2.8.11:
Improved:

• Spam resilience of contact forms

Updated:

• Instagram functionality to reflect changes in their service
• Youtube functionality to better adhere to their branding guidelines

Fixed:

• Blurry initial image on videos in some cases
• Initial video image occasionally used for previously published videos
• In-canvas rendering of some SVGs

Источник

Sparkle ��� mac os

Sparkle 2 (Beta)

Secure and reliable software update framework for Cocoa developers.

This is the upcoming new version of Sparkle. Major new features are support for sandboxing, custom user interfaces, updating external bundles, and a more modern secure architecture which includes faster and more reliable installs.

For the production ready version of Sparkle, please see the Sparkle 1.x (master) branch. Note development has shifted to Sparkle 2 and the 1.x branch is now only accepting bug fixes, localization updates, and adoption of critical upcoming OS features.

Sparkle 2 is currently in beta. Applications, typically sandboxed, have already been using it in production, but some work including testing is still required before an official version can be released. Pre-releases can be found on the Sparkle’s Releases. More nightly builds can be downloaded by selecting a recent workflow run and downloading the corresponding Sparkle-distribution artifact.

The current status of Sparkle 2 is tracked by its roadmap.

If you can help with testing or reviewing over the new changes, please report issues or submit pull requests!

Please visit Sparkle’s website for up to date documentation on using and migrating over to Sparkle 2. Refer to Changelog for a more detailed list of changes. More internal design documents can be found in Documentation.

• Seamless. There’s no mention of Sparkle; your icons and app name are used.
• Secure. Updates are verified using EdDSA signatures and Apple Code Signing.
• Fast. Supports delta updates which only patch files that have changed.
• Easy to install. Sparkle requires no code in your app, and only needs static files on a web server.
• Supports bundles, preference panes, plugins, and other non-.app software. Can install .pkg files for more complicated products.
• Handles permissions, quarantine and automatically asks for authentication if needed.
• Uses RSS-based appcasts for release information. Appcasts are a de-facto standard supported by 3rd party update-tracking programs and websites.
• Stays hidden until second launch for better first impressions.
• Truly self-updating — the user can choose to automatically download and install all updates in the background.
• Ability to mark updates as critical.
• Progress and status notifications for the host app.

• Runtime: macOS 10.11 or greater
• Build: Latest major Xcode (stable or beta, whichever is latest) and one major version less.
• HTTPS server for serving updates (see App Transport Security)

See getting started guide. No code is necessary, but a bit of Xcode configuration is required.

This repository uses git submodules, and will not build unless you clone recursively. Also, GitHub-provided ZIP/tar archives are broken due to GitHub not supporting git submodules properly.

Please check Console.app. Sparkle prints detailed information there about all problems it encounters. It often also suggests solutions to the problems, so please read Sparkle’s log messages carefully.

Use the generate_appcast tool which creates appcast files, correct signatures, and delta updates automatically.

Make sure the URL specified in SUFeedURL is valid (typos/404s are a common error!), and that it uses modern TLS (test it).

Sparkle is built with -fvisibility=hidden -fvisibility-inlines-hidden which means no symbols are exported by default. If you are adding a symbol to the public API you must decorate the declaration with the SU_EXPORT macro (grep the source code for examples).

Building the distribution package

cd to the root of the Sparkle source tree and run make release . Sparkle-VERSION.tar.xz (or .bz2) will be created in a temporary directory and revealed in Finder after the build has completed.

Alternatively, build the Distribution scheme in the Xcode UI.

Code of Conduct

We pledge to have an open and welcoming environment. See our Code of Conduct.

Источник