Downloader differs from previously opened versions

[zorgiepoo]

Due to a sandboxing issue new to macOS Sonoma and due to this app and other apps using Sparkle's Downloader XPC Service, users may see a one-time system warning dialog when checking for updates about "Downloader" differs from previously opened versions.

It looks like ShowyEdge wants to use the Sparkle's Downloader XPC Service from following Sparkle's sandboxing guide because the app is not entitled with an outgoing network connection (com.apple.security.network.client) entitlement. So there are a couple ways to fix this issue:

• ShowyEdge can update to Sparkle 2.6.0 or later (which disables sandboxing for the Downloader XPC Service by default to avoid conflicts) (easiest way)
• ShowyEdge can re-compile their current version of Sparkle with a custom XPC_SERVICE_BUNDLE_ID_PREFIX

See sparkle-project/Sparkle#2514 for more information on the issue.

[tekezo]

Thank you for feedback! I'll update Sparkle to 2.6.0.

[zorgiepoo]

For completeness sake, I forgot to mention a third option.. The app can enable the Outgoing Network Connection (com.apple.security.network.client) entitlement on the app instead of enabling Sparkle's Downloader XPC Service (as there are other drawbacks with it, e.g. Sparkle can't use WebKit 2).

I updated the sandbox documentation for the downloader service here.

Up to you what you pick as each option has its own tradeoff.