Have you upgraded macOS as well as Xcode? This sounds more like an OS bug than an Xcode bug. But it does look like a bug, since the docs say that the image will be automatically scaled as needed. I'd say do file a bug report, and then try supplying a 1024 x 1024 image.

Yes, the archives are applications.I devised my custom compression scheme back in the days when I had to worry about resource forks. Maybe I don't need it any more, except I'm not sure about the symbolic links inside frameworks.

I knew that ditto (with the right parameters) was able to handle the necessary cases. But I'd much rather have an API rather than needing to use NSTask for compression and decompression.> The notary services needs to be able to see all the code that you ship in order to include that code in the ticket that it issues.I'm not sure why I need that to happen, because the apps being compressed have individually been notarized and stapled.

> So what zip archive API are you currently using?I'm using the minizip contributed code that comes with zlib, with my own rules for using the "local extra field" to store things like mod date, creation date, and executable bit.> Indeed, you can use COPYFILE_PACK to do the heavy lifting. See the copyfile man page for more info.That looks useful, thanks.> OK, at this point I need to get a better understanding of the big picture. What is your app doing with these nested, archived apps?It's a custom installer.

Thank you very much for your efforts, things are clear to me now.

I've used Lua, but my situation is that I use a Python script that uses the SMTP library of Python, and I wouldn't know how to duplicate that functionality in a different language. An option, I suppose, would be to find some other SMTP library.I'm not worried about how to run a bundled tool. I use NSTask to run the script, and I could use the same techniques to run a command executable.What does worry me (maybe it's a silly worry) is that if I build Python with a specified PREFIX, it might think that all its files have full paths beginning with that prefix. If these files are inside my application bundle, which is not at a fixed location, then that wouldn't be true.

Yes, the SMTP functionality is the only reason I need python. I guess I should look into Hedwig. It's in Swift, which I've never used, but I should make time to learn about it one of these years.

I didn't know libcurl could do SMTP. I looked at the docs a bit, and it looks kind of complicated. For instance their examples have hard-coded inputs for headers like date and message-ID, and I would have expected an SMTP library to take care of that stuff for me. Thanks for the pointer to smtp-client, that looks promising.I'm using SMTP to send crash reports from user machines to mine, with minimal help from the user. I use my own SMTP server, so it does not have to be configured by end users, they don't even have to have set up an email client.

Yes, I knew about App Store provided crash reports, but I can't sell in the App Store for various reasons.I don't quite get what you're saying about networks and firewalls. I could understand that being a problem if I were trying to run an SMTP server on the client's Mac, but that's not the situation. I think I'm basically doing the same as what Mail.app or Thunderbird.app does when it sends an email, except that I'm using a hard-coded server address instead of asking the user to configure one.

OK, now the status page says there is an outage.

They are keychain items that I created, but I suppose that they might predate a revision to my developer ID certificate that happened some time in 2017. That's probably it. Keychain items aren't keyed to the name of the app, are they? I ask because if I get info on a keychain item in Keychain Access, under Access Control I see one or more application names. A debug build of my app has a different name from a release build, so I was wondering whether that might confuse things.

@eskimo, regarding your comment "Making sure you app has a provisioning profile", how do I do that? Under my developer account, I can see a list of profiles, but nothing about how to create one. And in Xcode's account preferences, there is a button "Download Manual Profiles", but it's not clear that anything happens when I click it.

And if I use manual code signing, is there any way to make a profile?

I've been to the "Certificates, Identifiers and Profiles" section of my account, but when I go to the Profiles subsection, there is no button or plus sign to create one. (Whereas, in the Certificates subsection, I do see a plus button.)

@TynJJ: How I do the update is just [progressBar setDoubleValue: 0.0]. I tried both of the things you suggest and neither had any effect.