Release_iOS-18-4_macOS-15-4

declarative/declarations/configurations/account.exchange.yaml

@@ -75,9 +75,7 @@ payloadkeys:
   title: Server Host Name
   type: <string>
   presence: optional
-  content: The hostname of the EWS server (or IP address). This is a required field
-    on iOS and visionOS, unless the declaration contains an 'OAuth' property, with
-    'Enabled' set to 'true' and without a 'SignInURL'.
+  content: Specifies the Exchange server host name (or IP address).
 - key: Port
   title: Server Port
   supportedOS:

declarative/declarations/configurations/app.managed.yaml

@@ -19,11 +19,16 @@ payload:
     tvOS:
       introduced: n/a
     visionOS:
-      introduced: n/a
+      introduced: '2.4'
+      allowed-enrollments:
+      - supervised
+      - device
+      - user
+      allowed-scopes:
+      - system
     watchOS:
       introduced: n/a
   apply: multiple
-  beta: true
 payloadkeys:
 - key: AppStoreID
   title: App Store ID
@@ -90,6 +95,8 @@ payloadkeys:
           removed: '18.0'
         macOS:
           removed: '15.0'
+        visionOS:
+          introduced: n/a
       type: <string>
       presence: optional
       rangelist:
@@ -136,6 +143,9 @@ payloadkeys:
     content: If 'true', the system enables direct downloads for the 'AssociatedDomains'.
   - key: CellularSliceUUID
     title: Cellular Slice UUID
+    supportedOS:
+      visionOS:
+        introduced: n/a
     type: <string>
     presence: optional
     content: The cellular slice identifier, which can be the data network name (DNN)
@@ -152,6 +162,31 @@ payloadkeys:
     type: <string>
     presence: optional
     content: The UUID of the DNS proxy to associate with the app.
+  - key: Hideable
+    title: Hideable
+    supportedOS:
+      iOS:
+        introduced: '18.1'
+      visionOS:
+        introduced: n/a
+    type: <boolean>
+    presence: optional
+    default: true
+    content: If `false`, the user cannot hide the app. It does not affect the user's
+      ability to leave it in the App Library, while removing it from the home screen.
+  - key: Lockable
+    title: Lockable
+    supportedOS:
+      iOS:
+        introduced: '18.1'
+      visionOS:
+        introduced: n/a
+    type: <boolean>
+    presence: optional
+    default: true
+    content: If `false`, the user cannot lock or hide the app. Because hiding an app
+      also requires locking it, disallowing the user from locking the app will also
+      prevent the user from hiding it.
   - key: RelayUUID
     title: Relay UUID
     type: <string>
@@ -159,6 +194,9 @@ payloadkeys:
     content: The UUID of the relay to associate with the app.
   - key: TapToPayScreenLock
     title: Tap to Pay Screen Lock
+    supportedOS:
+      visionOS:
+        introduced: n/a
     type: <boolean>
     presence: optional
     default: false
@@ -169,6 +207,160 @@ payloadkeys:
     type: <string>
     presence: optional
     content: The UUID of the VPN to associate with the app.
+- key: AppConfig
+  title: App Config
+  supportedOS:
+    iOS:
+      introduced: '18.4'
+    macOS:
+      introduced: n/a
+  type: <dictionary>
+  presence: optional
+  content: A dictionary of app config data and credentials.
+  subkeytype: AppConfigDictionary
+  subkeys: &id001
+  - key: DataAssetReference
+    title: App/Extension Config Data Asset Reference
+    type: <string>
+    assettypes:
+    - com.apple.asset.data
+    asset-content-types:
+    - application/plist
+    - application/x-plist
+    - application/xml
+    - text/xml
+    presence: optional
+    content: Specifies the identifier of an asset declaration containing a reference
+      to the app/extension config data. The corresponding asset must be of type "com.apple.asset.data".
+      The referenced data must be a property list file, and the asset's "ContentType"
+      value should be set to match the data type.
+  - key: Passwords
+    title: Password App/Extension Configs.
+    type: <array>
+    presence: optional
+    content: Provides passwords to the managed app/extension. Each element in the
+      array contains a password asset reference and an associated identifier, which
+      the app/extension may use to look up the password.
+    subkeytype: CredentialConfig
+    subkeys:
+    - key: PasswordAppConfigItem
+      type: <dictionary>
+      presence: required
+      subkeys:
+      - key: Identifier
+        title: Password Identifier
+        type: <string>
+        presence: required
+        content: The app/extension uses this identifier to fetch the corresponding
+          password using the ManagedApp framework. App developers will define what
+          values can be used for these identifiers.
+      - key: AssetReference
+        title: Asset Reference
+        type: <string>
+        assettypes:
+        - com.apple.asset.credential.userpassword
+        presence: required
+        content: Specifies the identifier of an asset declaration containing a user
+          name and password. The password is made available to the managed app/extension.
+          The user name is ignored.
+  - key: Identities
+    title: Identity App/Extension Configs.
+    type: <array>
+    presence: optional
+    content: Provides identities to the managed app/extension. Each element in the
+      array contains an identity asset reference and an associated identifier, which
+      the app/extension may use to look up the identity.
+    subkeytype: CredentialConfig
+    subkeys:
+    - key: IdentityAppConfigItem
+      type: <dictionary>
+      presence: required
+      subkeys:
+      - key: Identifier
+        title: Identity Identifier
+        type: <string>
+        presence: required
+        content: The app/extension uses this identifier to fetch the corresponding
+          identity using the ManagedApp framework. App developers will define what
+          values can be used for these identifiers.
+      - key: AssetReference
+        title: Asset Reference
+        type: <string>
+        assettypes:
+        - com.apple.asset.credential.identity
+        - com.apple.asset.credential.scep
+        - com.apple.asset.credential.acme
+        presence: required
+        content: Specifies the identifier of an asset declaration containing an identity
+          that is made available to the managed app/extension.
+  - key: Certificates
+    title: Certificate App/Extension Configs.
+    type: <array>
+    presence: optional
+    content: Provides certificates to the managed app/extension. Each element in the
+      array contains a certificate asset reference and an associated identifier, which
+      the app/extension may use to look up the certificate.
+    subkeytype: CredentialConfig
+    subkeys:
+    - key: CertificateAppConfigItem
+      type: <dictionary>
+      presence: required
+      subkeys:
+      - key: Identifier
+        title: Certificate Identifier
+        type: <string>
+        presence: required
+        content: The app/extension uses this identifier to fetch the corresponding
+          certificate using the ManagedApp framework. App developers will define what
+          values can be used for these identifiers.
+      - key: AssetReference
+        title: Asset Reference
+        type: <string>
+        assettypes:
+        - com.apple.asset.credential.certificate
+        presence: required
+        content: Specifies the identifier of an asset declaration containing a certificate
+          that is made available to the managed app/extension.
+- key: ExtensionConfigs
+  title: Extension Configs
+  supportedOS:
+    iOS:
+      introduced: '18.4'
+    macOS:
+      introduced: n/a
+  type: <dictionary>
+  presence: optional
+  content: A dictionary of extension config data and credentials.
+  subkeys:
+  - key: ANY
+    title: Extension Composed Identifier
+    type: <dictionary>
+    presence: optional
+    content: A dictionary mapping extension composed identifiers to the extension
+      config data and credentials. The expected format is "Identifier (TeamIdentifier)".
+    subkeytype: AppConfigDictionary
+    subkeys: *id001
+- key: LegacyAppConfigAssetReference
+  title: App Config MDMv1 Asset Reference
+  supportedOS:
+    iOS:
+      introduced: '18.4'
+    macOS:
+      introduced: n/a
+  type: <string>
+  assettypes:
+  - com.apple.asset.data
+  asset-content-types:
+  - application/plist
+  - application/x-plist
+  - application/xml
+  - text/xml
+  presence: optional
+  content: Specifies the identifier of an asset declaration containing a reference
+    to the app config data. This app config data is applied and made available to
+    the app using the traditional MDMv1 behavior. The corresponding asset must be
+    of type "com.apple.asset.data". The referenced data must be a property list file,
+    and the asset's "ContentType" value should be set to match the data type.
 related-status-items:
 - status-items:
   - app.managed.list

declarative/declarations/configurations/softwareupdate.enforcement.specific.yaml

@@ -20,7 +20,12 @@ payload:
       allowed-scopes:
       - system
     tvOS:
-      introduced: n/a
+      introduced: '18.4'
+      allowed-enrollments:
+      - supervised
+      - device
+      allowed-scopes:
+      - system
     visionOS:
       introduced: n/a
     watchOS:

declarative/declarations/configurations/softwareupdate.settings.yaml

@@ -20,7 +20,12 @@ payload:
       allowed-scopes:
       - system
     tvOS:
-      introduced: n/a
+      introduced: '18.4'
+      allowed-enrollments:
+      - supervised
+      - device
+      allowed-scopes:
+      - system
     visionOS:
       introduced: n/a
     watchOS:
@@ -42,6 +47,9 @@ payloadkeys:
     iOS:
       allowed-enrollments:
       - supervised
+    tvOS:
+      allowed-enrollments:
+      - supervised
   type: <dictionary>
   presence: optional
   content: This object configures the deferral of software updates. Rapid Security
@@ -66,6 +74,8 @@ payloadkeys:
     supportedOS:
       iOS:
         introduced: n/a
+      tvOS:
+        introduced: n/a
     type: <integer>
     presence: optional
     range:
@@ -80,6 +90,8 @@ payloadkeys:
     supportedOS:
       iOS:
         introduced: n/a
+      tvOS:
+        introduced: n/a
     type: <integer>
     presence: optional
     range:
@@ -95,6 +107,8 @@ payloadkeys:
     supportedOS:
       iOS:
         introduced: n/a
+      tvOS:
+        introduced: n/a
     type: <integer>
     presence: optional
     range:
@@ -109,6 +123,8 @@ payloadkeys:
   supportedOS:
     macOS:
       introduced: n/a
+    tvOS:
+      introduced: n/a
   type: <string>
   presence: optional
   rangelist:
@@ -127,12 +143,18 @@ payloadkeys:
     iOS:
       allowed-enrollments:
       - supervised
+    tvOS:
+      allowed-enrollments:
+      - supervised
   type: <dictionary>
   presence: optional
   content: This object configures various automatic Software Update functionality.
   subkeys:
   - key: Download
     title: Automatic downloads of available updates.
+    supportedOS:
+      tvOS:
+        introduced: n/a
     type: <string>
     presence: optional
     rangelist:
@@ -166,6 +188,8 @@ payloadkeys:
     supportedOS:
       iOS:
         introduced: n/a
+      tvOS:
+        introduced: n/a
     type: <string>
     presence: optional
     rangelist:
@@ -185,6 +209,8 @@ payloadkeys:
     iOS:
       allowed-enrollments:
       - supervised
+    tvOS:
+      introduced: n/a
   type: <dictionary>
   presence: optional
   content: These configurations set user access to interacting with Rapid Security
@@ -213,6 +239,8 @@ payloadkeys:
   supportedOS:
     iOS:
       introduced: n/a
+    tvOS:
+      introduced: n/a
   type: <boolean>
   presence: optional
   default: true
@@ -223,6 +251,12 @@ payloadkeys:
 - key: Beta
   supportedOS:
     macOS:
+      introduced: '15.4'
+      allowed-enrollments:
+      - supervised
+      allowed-scopes:
+      - system
+    tvOS:
       introduced: n/a
   type: <dictionary>
   presence: optional

declarative/status/app.managed.list.yaml

@@ -19,10 +19,15 @@ payload:
     tvOS:
       introduced: n/a
     visionOS:
-      introduced: n/a
+      introduced: '2.4'
+      allowed-enrollments:
+      - supervised
+      - device
+      - user
+      allowed-scopes:
+      - system
     watchOS:
       introduced: n/a
-  beta: true
 payloadkeys:
 - key: app.managed.list
   title: Status item value.
@@ -121,8 +126,57 @@ payloadkeys:
         * 'prompting-for-update-login': The system is displaying an App Store sign-in prompt to the user to allow app installation.
         * 'updating': The app is updating.
         * 'failed': The app update failed.
-
         This key is only present if 'state' is 'managed' and an update is available.
+    - key: config-state
+      title: Managed application configuration status
+      supportedOS:
+        iOS:
+          introduced: '18.4'
+        macOS:
+          introduced: n/a
+      type: <dictionary>
+      presence: optional
+      content: The status of app or extension managed configurations. This key is
+        only present when managed configurations are available for the managed app
+        or any of its extensions.
+      subkeytype: ManagedConfiguration
+      subkeys:
+      - key: app-config-state
+        title: Application managed configuration status
+        type: <dictionary>
+        presence: optional
+        content: The status of any app managed configuration. This key is only present
+          when the managed app has a managed configuration.
+        subkeytype: ManagedConfigurationState
+        subkeys: &id001
+        - key: state
+          title: Managed configuration status
+          type: <string>
+          presence: required
+          rangelist:
+          - unknown
+          - invalid
+          - valid
+          content: |-
+            The managed configuration status.
+            * 'unknown' - the managed configuration has not been read
+            * 'invalid' - the managed configuration was read and deemed to be invalid
+            * 'valid' - the managed configuration was read and deemed to be valid
+      - key: extension-config-state
+        title: Extensions managed configuration status
+        type: <dictionary>
+        presence: optional
+        content: The status of any app extension managed configuration. This key's
+          value is a dictionary whose keys are the bundle identifiers of app extensions
+          that have a managed configuration. The values of each key represent the
+          status of the corresponding app extension's managed configuration.
+        subkeys:
+        - key: ANY
+          type: <dictionary>
+          presence: optional
+          content: The bundle identifier of the managed app extension.
+          subkeytype: ManagedConfigurationState
+          subkeys: *id001
     - key: reasons
       title: Status Reasons
       type: <array>
@@ -158,34 +212,36 @@ payloadkeys:
             presence: optional
             content: Additional keys may be present.
 reasons:
-- value: Error.UnmanagedAppAlreadyInstalled
-  description: An unmanaged app is already installed and cannot be managed.
-- value: Error.DuplicateConfiguredApp
-  description: The app is already being managed.
-- value: Error.UserRejected
-  description: The user rejected management of the app.
 - value: Error.AppStoreDisabled
   description: The App Store is disabled.
-- value: Error.LicenseNotFound
-  description: A license for the app was not available.
-- value: Error.InvalidAppID
-  description: The app id could not be found.
-- value: Error.NotAnApp
-  description: The downloaded data is not a valid app.
-- value: Error.NotSupported
-  description: The app is not supported on this device.
 - value: Error.DownloadFailed
   description: The app download failed.
   details:
   - key: Timestamp
     type: <string>
     description: The RFC 3339 timestamp of the last download failure.
+- value: Error.DuplicateConfiguredApp
+  description: The app is already being managed.
 - value: Error.InstallFailed
   description: The app install failed.
   details:
   - key: Timestamp
     type: <string>
     description: The RFC 3339 timestamp of the last install failure.
+- value: Error.InvalidAppID
+  description: The app id could not be found.
+- value: Error.IsSystemApp
+  description: The app is a system app that cannot be managed.
+- value: Error.LicenseNotFound
+  description: A license for the app was not available.
+- value: Error.NotAnApp
+  description: The downloaded data is not a valid app.
+- value: Error.NotSupported
+  description: The app is not supported on this device.
+- value: Error.UnmanagedAppAlreadyInstalled
+  description: An unmanaged app is already installed and cannot be managed.
+- value: Error.UserRejected
+  description: The user rejected management of the app.
 - value: Info.UpdateAvailable
   description: An update is available for the app.
 - value: Error.UpdateFailed

declarative/status/device.power.battery-health.yaml

@@ -47,4 +47,4 @@ payloadkeys:
     * 'unknown': The system couldn't determine battery health information.
     * 'unsupported': The device doesn't support battery health reporting.
 
-    Available in iOS 17 and later on iPhone only, and macOS 14.4 and later on Apple silicon Mac computers. iPad and Intel-based Macs return 'unsupported'.
+    Available in iOS 17 and later on iPhone, iPadOS 18.4 and later on supported iPad models, and macOS 14.4 and later on Apple silicon Mac computers.

declarative/status/softwareupdate.device-id.yaml

@@ -20,7 +20,12 @@ payload:
       allowed-scopes:
       - system
     tvOS:
-      introduced: n/a
+      introduced: '18.4'
+      allowed-enrollments:
+      - supervised
+      - device
+      allowed-scopes:
+      - system
     visionOS:
       introduced: n/a
     watchOS:

declarative/status/softwareupdate.failure-reason.yaml

@@ -20,7 +20,12 @@ payload:
       allowed-scopes:
       - system
     tvOS:
-      introduced: n/a
+      introduced: '18.4'
+      allowed-enrollments:
+      - supervised
+      - device
+      allowed-scopes:
+      - system
     visionOS:
       introduced: n/a
     watchOS:

declarative/status/softwareupdate.install-reason.yaml

@@ -20,7 +20,12 @@ payload:
       allowed-scopes:
       - system
     tvOS:
-      introduced: n/a
+      introduced: '18.4'
+      allowed-enrollments:
+      - supervised
+      - device
+      allowed-scopes:
+      - system
     visionOS:
       introduced: n/a
     watchOS:

declarative/status/softwareupdate.install-state.yaml

@@ -20,7 +20,12 @@ payload:
       allowed-scopes:
       - system
     tvOS:
-      introduced: n/a
+      introduced: '18.4'
+      allowed-enrollments:
+      - supervised
+      - device
+      allowed-scopes:
+      - system
     visionOS:
       introduced: n/a
     watchOS:

declarative/status/softwareupdate.pending-version.yaml

@@ -20,7 +20,12 @@ payload:
       allowed-scopes:
       - system
     tvOS:
-      introduced: n/a
+      introduced: '18.4'
+      allowed-enrollments:
+      - supervised
+      - device
+      allowed-scopes:
+      - system
     visionOS:
       introduced: n/a
     watchOS: