From f7c686d5cf59bee694b4676bf87f186685c8e258 Mon Sep 17 00:00:00 2001 From: jjbrunton Date: Sun, 30 Aug 2026 10:39:33 +0100 Subject: [PATCH] docs(release): verify iOS extension versions --- ...8-30-ios-extension-version-verification.md | 39 +++++++++++++++++++ .codex/skills/release-mobile/SKILL.md | 8 +++- 2 files changed, 45 insertions(+), 2 deletions(-) create mode 100644 .agents/learnings/promoted/2026-08-30-ios-extension-version-verification.md diff --git a/.agents/learnings/promoted/2026-08-30-ios-extension-version-verification.md b/.agents/learnings/promoted/2026-08-30-ios-extension-version-verification.md new file mode 100644 index 0000000..d8497c0 --- /dev/null +++ b/.agents/learnings/promoted/2026-08-30-ios-extension-version-verification.md @@ -0,0 +1,39 @@ +--- +id: 2026-08-30-ios-extension-version-verification +date: 2026-08-30 +status: promoted +scope: iOS release artifact verification +evidence: build 45 Xcode archive warning plus direct PlistBuddy inspection of the exported IPA +destination: .codex/skills/release-mobile/SKILL.md +review_after: 2027-02-28 +--- + +## Symptom + +The signed iOS build logged that the widget extension build number 44 did not +match the containing app build number 45, even though export completed. + +## Reproduction + +Build iOS version 1.0.6 with EAS auto-increment from build 44 to 45 and retain the +archive log. Extract the resulting IPA with `ditto`, then read the containing app +and every packaged extension `Info.plist` with `PlistBuddy`. + +## Cause + +The archive warning described an intermediate state and was not authoritative +for the exported package. Direct IPA inspection showed both the app and +`LiveDrawWidget.appex` at version 1.0.6 build 45. + +## Remediation + +For every iOS release, inspect version and build values in the exported app and +all packaged extensions. Reject or rebuild only when the final IPA values differ; +do not accept or reject a release from archive warnings alone. + +## Evidence + +`PlistBuddy` read `CFBundleShortVersionString` 1.0.6 and `CFBundleVersion` 45 from +both packaged plists. `codesign --verify --deep --strict` passed for the app, and +the verified IPA SHA-256 was +`9d4779bddac4647911a3a38e4ee37cf794c2b8691e0746a041b629c62b308e7f`. diff --git a/.codex/skills/release-mobile/SKILL.md b/.codex/skills/release-mobile/SKILL.md index bb40cd8..ba7e23c 100644 --- a/.codex/skills/release-mobile/SKILL.md +++ b/.codex/skills/release-mobile/SKILL.md @@ -54,5 +54,9 @@ additional TestFlight distribution requires another fresh authorization. Preserve platform signing and local EAS versioning. After a build, verify that tracked changes are limited to the expected version metadata, then independently -read the artifact version and signature. Report the artifact, version/build -number, upload result when authorized, and store read-back state. +read the artifact version and signature. For an iOS IPA, inspect every packaged +app extension as well as the containing app and require matching +`CFBundleShortVersionString` and `CFBundleVersion` values. Treat Xcode archive +warnings as diagnostic evidence, not the final artifact state: decide whether to +reject or rebuild only after reading the exported IPA itself. Report the artifact, +version/build number, upload result when authorized, and store read-back state.