chore(release): bump to v1.1.3 with Developer ID signing and notarization

Drop the Gatekeeper xattr workaround now that Release builds are signed and notarized.

Author: Geoion

FrameworkScanner.xcodeproj/project.pbxproj

@@ -17,9 +17,12 @@
 		32B634FCBF58491156EC3742 /* 2024-03.json in Resources */ = {isa = PBXBuildFile; fileRef = 6142E0D3C9FD52DF62264783 /* 2024-03.json */; };
 		36EEC6C93FF97C18901DFEA8 /* FrameworkType.swift in Sources */ = {isa = PBXBuildFile; fileRef = 2AABDDD2FB3B63FAC872D10A /* FrameworkType.swift */; };
 		410B5ACB1A4E08D00711F1B0 /* 2024-07.json in Resources */ = {isa = PBXBuildFile; fileRef = EBB0AC9AC7EA01B1272C31BE /* 2024-07.json */; };
+		458AEFA3FAA9F2481AB3B722 /* qt.json in Resources */ = {isa = PBXBuildFile; fileRef = 9A0BB2016993DD56CF5BC55B /* qt.json */; };
 		46D76EABE951C7ECEDEF692E /* 2026-03.json in Resources */ = {isa = PBXBuildFile; fileRef = 04DFBB807D2B74455C06E004 /* 2026-03.json */; };
+		5C3DB8DBF20D73D1E84CB587 /* python.json in Resources */ = {isa = PBXBuildFile; fileRef = 6C2F0DFBC6D6AF1A88B26D76 /* python.json */; };
 		633C5FCCDC75DE9DDDF10413 /* SecurityAnalyzer.swift in Sources */ = {isa = PBXBuildFile; fileRef = B4110FE665F0C65E67B5B2F7 /* SecurityAnalyzer.swift */; };
 		699426EE7C7ED5E8BCA7E38D /* StatsBarView.swift in Sources */ = {isa = PBXBuildFile; fileRef = 975D797325DEE497B9591ED1 /* StatsBarView.swift */; };
+		741DDE7136D7E8EB0DFE1AE4 /* cef.json in Resources */ = {isa = PBXBuildFile; fileRef = A32489349256EC1794FF1629 /* cef.json */; };
 		87027E0577983DBA4FBD599D /* FileSizeFormatter.swift in Sources */ = {isa = PBXBuildFile; fileRef = 76B749ACC14FC0B04BD7A178 /* FileSizeFormatter.swift */; };
 		881DB9D51D11878D399148E4 /* AppScanner.swift in Sources */ = {isa = PBXBuildFile; fileRef = 9D2A33B6EDF76F7AE65C00DB /* AppScanner.swift */; };
 		8D40EBAAE53F7B644E6D0790 /* ArchitectureDetector.swift in Sources */ = {isa = PBXBuildFile; fileRef = C058D598C6F3A5AED44727A7 /* ArchitectureDetector.swift */; };
@@ -28,6 +31,7 @@
 		A14D08ECC1F9FE0162C5F850 /* Assets.xcassets in Resources */ = {isa = PBXBuildFile; fileRef = 68A9AA4A9435ADA088B99577 /* Assets.xcassets */; };
 		B4C7E5E8A9E90115E0989BDF /* ElectronAnalyzer.swift in Sources */ = {isa = PBXBuildFile; fileRef = 62FB7B2F88E2D5056DBBA431 /* ElectronAnalyzer.swift */; };
 		BAD7046FADCAD9FBC3F466CF /* SortOption.swift in Sources */ = {isa = PBXBuildFile; fileRef = BCD4AAA3C4CEEB139F16A3D3 /* SortOption.swift */; };
+		BD363C64C536629423389DFE /* electron.json in Resources */ = {isa = PBXBuildFile; fileRef = C20FCDFE2F2EF28395F40D89 /* electron.json */; };
 		C60B4C8C2D777AC654123FA8 /* 2025-09.json in Resources */ = {isa = PBXBuildFile; fileRef = 04CBAC5F16395BDDB52DF55B /* 2025-09.json */; };
 		CA9EDBD3C72F93CB020A8845 /* 2023-11.json in Resources */ = {isa = PBXBuildFile; fileRef = 444696F487DB29A315E0099F /* 2023-11.json */; };
 		D66319EE0E856890231ADD64 /* ExportService.swift in Sources */ = {isa = PBXBuildFile; fileRef = 6D5850A5A0DA0327E59573DB /* ExportService.swift */; };
@@ -64,20 +68,24 @@
 		6142E0D3C9FD52DF62264783 /* 2024-03.json */ = {isa = PBXFileReference; lastKnownFileType = text.json; path = "2024-03.json"; sourceTree = "<group>"; };
 		62FB7B2F88E2D5056DBBA431 /* ElectronAnalyzer.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ElectronAnalyzer.swift; sourceTree = "<group>"; };
 		68A9AA4A9435ADA088B99577 /* Assets.xcassets */ = {isa = PBXFileReference; lastKnownFileType = folder.assetcatalog; path = Assets.xcassets; sourceTree = "<group>"; };
+		6C2F0DFBC6D6AF1A88B26D76 /* python.json */ = {isa = PBXFileReference; lastKnownFileType = text.json; path = python.json; sourceTree = "<group>"; };
 		6D5850A5A0DA0327E59573DB /* ExportService.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ExportService.swift; sourceTree = "<group>"; };
 		76B749ACC14FC0B04BD7A178 /* FileSizeFormatter.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = FileSizeFormatter.swift; sourceTree = "<group>"; };
 		7FCE4BE74E9979A9408C294C /* de */ = {isa = PBXFileReference; lastKnownFileType = text.plist.strings; name = de; path = de.lproj/Localizable.strings; sourceTree = "<group>"; };
 		8220A9E8F7F05379C379AB2F /* FilterToolbar.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = FilterToolbar.swift; sourceTree = "<group>"; };
 		8B2740B7249B0F125927DDFE /* FrameworkScanner.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = FrameworkScanner.app; sourceTree = BUILT_PRODUCTS_DIR; };
 		93E9F6CBCF2D982BC6A5A1B4 /* AppRowView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AppRowView.swift; sourceTree = "<group>"; };
 		975D797325DEE497B9591ED1 /* StatsBarView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = StatsBarView.swift; sourceTree = "<group>"; };
+		9A0BB2016993DD56CF5BC55B /* qt.json */ = {isa = PBXFileReference; lastKnownFileType = text.json; path = qt.json; sourceTree = "<group>"; };
 		9D2A33B6EDF76F7AE65C00DB /* AppScanner.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AppScanner.swift; sourceTree = "<group>"; };
+		A32489349256EC1794FF1629 /* cef.json */ = {isa = PBXFileReference; lastKnownFileType = text.json; path = cef.json; sourceTree = "<group>"; };
 		B33144B83F8675BF71CD378E /* ChartsWindowView.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ChartsWindowView.swift; sourceTree = "<group>"; };
 		B4110FE665F0C65E67B5B2F7 /* SecurityAnalyzer.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = SecurityAnalyzer.swift; sourceTree = "<group>"; };
 		B46FBD685922572B69B45D1D /* UpdateSheet.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = UpdateSheet.swift; sourceTree = "<group>"; };
 		BCB685F234D593824D250F54 /* ko */ = {isa = PBXFileReference; lastKnownFileType = text.plist.strings; name = ko; path = ko.lproj/Localizable.strings; sourceTree = "<group>"; };
 		BCD4AAA3C4CEEB139F16A3D3 /* SortOption.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = SortOption.swift; sourceTree = "<group>"; };
 		C058D598C6F3A5AED44727A7 /* ArchitectureDetector.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ArchitectureDetector.swift; sourceTree = "<group>"; };
+		C20FCDFE2F2EF28395F40D89 /* electron.json */ = {isa = PBXFileReference; lastKnownFileType = text.json; path = electron.json; sourceTree = "<group>"; };
 		C9F57B6D8CC1DC6976FFFEFF /* FrameworkDetector.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = FrameworkDetector.swift; sourceTree = "<group>"; };
 		CAFBDAE6F1289A3F0FDFE810 /* AppInfo.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AppInfo.swift; sourceTree = "<group>"; };
 		D30BC90142E03E564FC7513C /* EmbeddedFrameworkScanner.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = EmbeddedFrameworkScanner.swift; sourceTree = "<group>"; };
@@ -146,6 +154,10 @@
 				30CDB480105734E7594CEDA7 /* 2024-09.json */,
 				04CBAC5F16395BDDB52DF55B /* 2025-09.json */,
 				04DFBB807D2B74455C06E004 /* 2026-03.json */,
+				A32489349256EC1794FF1629 /* cef.json */,
+				C20FCDFE2F2EF28395F40D89 /* electron.json */,
+				6C2F0DFBC6D6AF1A88B26D76 /* python.json */,
+				9A0BB2016993DD56CF5BC55B /* qt.json */,
 			);
 			path = CVE;
 			sourceTree = "<group>";
@@ -285,6 +297,10 @@
 				46D76EABE951C7ECEDEF692E /* 2026-03.json in Resources */,
 				A14D08ECC1F9FE0162C5F850 /* Assets.xcassets in Resources */,
 				F3E68C45347C1B7CFE7146C5 /* Localizable.strings in Resources */,
+				741DDE7136D7E8EB0DFE1AE4 /* cef.json in Resources */,
+				BD363C64C536629423389DFE /* electron.json in Resources */,
+				5C3DB8DBF20D73D1E84CB587 /* python.json in Resources */,
+				458AEFA3FAA9F2481AB3B722 /* qt.json in Resources */,
 			);
 			runOnlyForDeploymentPostprocessing = 0;
 		};
@@ -349,15 +365,19 @@
 			buildSettings = {
 				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
 				CODE_SIGN_ENTITLEMENTS = Resources/FrameworkScanner.entitlements;
-				CODE_SIGN_IDENTITY = "-";
+				CODE_SIGN_IDENTITY = "Developer ID Application: Eski Yin (WSGQ32FL62)";
+				CODE_SIGN_STYLE = Manual;
 				COMBINE_HIDPI_IMAGES = YES;
+				CURRENT_PROJECT_VERSION = 3;
 				DEPLOYMENT_POSTPROCESSING = YES;
 				ENABLE_HARDENED_RUNTIME = YES;
 				INFOPLIST_FILE = Resources/Info.plist;
 				LD_RUNPATH_SEARCH_PATHS = (
 					"$(inherited)",
 					"@executable_path/../Frameworks",
 				);
+				MARKETING_VERSION = 1.1.3;
+				OTHER_CODE_SIGN_FLAGS = "--timestamp";
 				PRODUCT_BUNDLE_IDENTIFIER = com.eskiyin.FrameworkScanner;
 				PRODUCT_NAME = FrameworkScanner;
 				SDKROOT = macosx;
@@ -429,13 +449,15 @@
 				CODE_SIGN_ENTITLEMENTS = Resources/FrameworkScanner.Debug.entitlements;
 				CODE_SIGN_IDENTITY = "-";
 				COMBINE_HIDPI_IMAGES = YES;
+				CURRENT_PROJECT_VERSION = 3;
 				DEPLOYMENT_POSTPROCESSING = NO;
 				ENABLE_HARDENED_RUNTIME = NO;
 				INFOPLIST_FILE = Resources/Info.plist;
 				LD_RUNPATH_SEARCH_PATHS = (
 					"$(inherited)",
 					"@executable_path/../Frameworks",
 				);
+				MARKETING_VERSION = 1.1.3;
 				PRODUCT_BUNDLE_IDENTIFIER = com.eskiyin.FrameworkScanner;
 				PRODUCT_NAME = FrameworkScanner;
 				SDKROOT = macosx;

README.md

@@ -34,16 +34,7 @@ brew tap Geoion/tap
 brew install --cask frameworkscanner
 ```
 
-After installation, if macOS Gatekeeper blocks the app on first launch, run:
-
-```bash
-xattr -cr /Applications/FrameworkScanner.app
-```
-
-> **Why is this needed?**
-> macOS automatically adds a `com.apple.quarantine` extended attribute to files downloaded from the internet. This causes Gatekeeper to block unsigned or ad-hoc signed apps. The command above removes that attribute so the app can launch normally.
-
-Then open the app as usual.
+Or download the signed DMG from [Releases](https://github.com/Geoion/FrameworkScanner/releases).
 
 ### Build from Source
 
@@ -84,6 +75,12 @@ scripts/update_security_rules.sh --threshold 21
 
 ## Changelog
 
+### v1.1.3
+
+- **CVE refresh**: Updated Electron / Qt / Python / CEF vulnerability lists (2026-07); `minSafeElectronMajor` raised to 41
+- **Security tooling**: Fixed `compute_min_safe_electron_major` for prerelease version ranges, added unit tests
+- **Distribution**: Developer ID signed + notarized release builds (Gatekeeper-ready; no `xattr` workaround)
+
 ### v1.1.1
 
 - **i18n fix**: Complete localization for all 8 languages — Japanese, Korean, German, Spanish, Italian, and Russian translations were missing for the new keys added in v1.1.0 (security analysis, code signing detail, and charts)

Resources/Info.plist

@@ -15,8 +15,8 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>1.0</string>
+	<string>1.1.3</string>
 	<key>CFBundleVersion</key>
-	<string>1</string>
+	<string>3</string>
 </dict>
 </plist>

project.yml

@@ -25,19 +25,28 @@ targets:
         buildPhase: resources
     info:
       path: Resources/Info.plist
+      properties:
+        CFBundleShortVersionString: "1.1.3"
+        CFBundleVersion: "3"
     settings:
       base:
         PRODUCT_BUNDLE_IDENTIFIER: com.eskiyin.FrameworkScanner
         PRODUCT_NAME: FrameworkScanner
         INFOPLIST_FILE: Resources/Info.plist
+        MARKETING_VERSION: "1.1.3"
+        CURRENT_PROJECT_VERSION: "3"
         CODE_SIGN_IDENTITY: "-"
         SKIP_INSTALL: NO
       configs:
         Debug:
+          CODE_SIGN_IDENTITY: "-"
           CODE_SIGN_ENTITLEMENTS: Resources/FrameworkScanner.Debug.entitlements
           ENABLE_HARDENED_RUNTIME: NO
           DEPLOYMENT_POSTPROCESSING: NO
         Release:
+          CODE_SIGN_IDENTITY: "Developer ID Application: Eski Yin (WSGQ32FL62)"
+          CODE_SIGN_STYLE: Manual
           CODE_SIGN_ENTITLEMENTS: Resources/FrameworkScanner.entitlements
           ENABLE_HARDENED_RUNTIME: YES
           DEPLOYMENT_POSTPROCESSING: YES
+          OTHER_CODE_SIGN_FLAGS: "--timestamp"