Submitting 2 apps with the same framework => 1 passes, 1 has ITMS-91065 error

Hi,

I manage apps for several clients.

I have 2 apps for 2 different clients in which I use OneSignal version 5.1.5 (https://github.com/OneSignal/OneSignal-XCFramework).

The OneSignal part of these 2 applications are configured identically.

For both applications I can

  • Build the project
  • Create an archive of the project
  • Send the archive to TestFlight
  • Install the TestFlight version on an iPhone
  • Launch the app on the iPhone

For the 1st application I can submit to AppStore it without any problem.

For the 2nd application when I submit to AppStore it I have the error ITMS-91065 almost immediately in return by email.

ITMS-91065: Missing signature - Your app includes “Frameworks/OneSignalCore.framework/OneSignalCore”, which includes OneSignalCore, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. If a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a signature file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a signature. For details about verifying the code signature for a third-party SDK, visit: https://developer.apple.com/documentation/xcode/verifying-the-origin-of-your-xcframeworks.

ITMS-91065: Missing signature - Your app includes “Frameworks/OneSignalExtension.framework/OneSignalExtension”, which includes OneSignalExtension, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. If a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a signature file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a signature. For details about verifying the code signature for a third-party SDK, visit: https://developer.apple.com/documentation/xcode/verifying-the-origin-of-your-xcframeworks.

ITMS-91065: Missing signature - Your app includes “Frameworks/OneSignalOutcomes.framework/OneSignalOutcomes”, which includes RxSwift, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. If a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a signature file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a signature. For details about verifying the code signature for a third-party SDK, visit: https://developer.apple.com/documentation/xcode/verifying-the-origin-of-your-xcframeworks.

I checked and I had no errors on my project of the 2nd application.

I don't understand why the framework is accepted with the 1st application and refused with the 2nd application.

My config: macOS 14.5 (23F79), Xcode 15.4 (15F31d)

Has anyone ever had this kind of problem?

Regards

Tof

Have you figured it out?

Submitting 2 apps with the same framework => 1 passes, 1 has ITMS-91065 error
 
 
Q