CHANGELOG

[5.1.0-rc2]

2026-02-06

Highlights (5.1.x)

• Suport for macOS 26 Tahoe.
• New ability to target specific macOS versions (ex. 15.6.1) for both minor updates and major upgrades.
• Completely rearchitected super preferences mechanism allows for alternate configuration workflows. In other words, you can now create multiple different super workflow configurations and active them on an as-needed basis.
• Significantly improved macOS minor update workflow is fully compatible on systems with all built-in automatic software update options enabled.
• New scheduling options for automatic deferrals when provisioning new systems and when you want to delay the start of a workflow after zero day.
• New workflow options for installing non-system software updates.
• Significant quality of life improvements for gathering information about the super workflow configuration including a new super-audit.log and super-metrics.log.

Highlights (5.0.x)

• Suport for macOS 15 Sequoia.
• New scheduled installation workflows allow administrators or the end user to specify a date and time for the installation of macOS updates/upgrades, Jamf Pro Policies, or enforced system restarts.
• New schedule workflow active option allows administrators to set exactly when the super workflow is active, thus allowing for "maintenance windows".
• MacAdmin's SOFA integration allows schedule and deadline options to align with macOS release dates (as opposed to when super discovers a macOS release).
• Completely rearchitected main super logic so all workflow options can be permanent (via configuration profile) or temporary until the requested workflow is completed.
• Completely rearchitected software update/upgrade discovery to significantly improve reliability, performance, and improve support for native macOS software update restrictions deferral.
• Significantly improved behavior for alternate workflow targets (non-system updates, Jamf Pro Policies, and enforced system restarts) now support all deferral, schedule, deadline, and display options.
• Even more user interface customization options.
• Please visit the super Wiki for full details!

Compatibility Notes (5.x)

• super 5.x requires macOS 11 or newer.
• Several super 4.x command line options and managed preferences are not compatible with super 5.x
• Most super 3.0 command line options and managed preferences are not compatible with super 5.x
• Previously saved super 3.0 and 4.x Apple silicon authentication credentials are automatically migrated the first time super 5.x runs.
• Refer to this spreadsheet (tab separated values) for migrating super command line options.
• Refer to this spreadsheet (tab separated values) for migrating super managed preferences.
• Updated example MDM configuration profiles.
• Updated Jamf Pro External Application Custom Schema.
• Updated Jamf Pro Extension Attribute scripts.

Known Issues (5.x)

• The super workflow does not currently support Declarative Device Management (DDM) software update settings. You should continue to use traditional MDM configuration profiles to enforce software update settings.
• There are currently no publicly available Background Security Improvement (BSI, formerly named Rapid Security Response) updates for any version of macOS. As such, production BSI update workflows have not been validated against this version of super.
• The Jamf Pro new Managed Software Updates feature remains unreliable if the workflow target is not the latest minor update or major upgrade. In the mean time, the legacy Jamf Pro software update API remains stable (although deprecated) and local authentication is always the most reliable.

Specific Changes (5.1.0-rc2)

• Completely rearchitected software update/upgrade discovery (again) to resolve issues caused by inaccurate reporting from the mdmclient command. The super workflow no longer relies solely on the mdmclient command to determine software availability. As such, super workflows are now more likely to leverage mist-cli to determine macOS update/upgrade targets.
• New super-metrics.log contains a history of elapsed times for total workflow completion and interactive user dialogs. In addition to total dialog open time, both the user's active (input devices are active) and inactive elapsed times are recorded while the dialog is open.
• New support for code signed alternate configuration preference files. Signing remains optional but if an alternate configuration preference file has been code signed then it must be valid for super to accept it. Therefore, super will not accept any alternate configuration preference files that have been modified from their original signed state.
• New <key>ConfigCodeSignature</key> <string>Identifier</string> managed preference key enforces the use of code signed alternate configuration preference files. If this key is present then the super workflow will only accept alternate configuration preference files that are code signed and match the specified identifier. Both Apple Bundle and Apple Team identifiers are supported.
• New --install-macos-bsi-updates option overrides the --install-rapid-security-responses option. Presently this "new" option only represents a name change as the underlying mechanism for macOS BSI updates appears to be similar to the legacy macOS Rapid Security Responses. The --install-rapid-security-responses option remains but is deprecated and will be removed in a future version of super.
• Renamed --install-safari-updates-without-restarting option replaces the --install-safari-update-without-restarting option. The new option name is plural to match the format of the other non-system update options.
• New behavior for the --install-safari-updates-without-restarting option takes priority over the --install-non-system-updates-without-restarting option.
• New "ramped status" detection now recognizes when the target macOS minor update has not yet automatically downloaded to the system because it's being delayed by Apple's incremental rollout mechanism. This status is reported to the super.log and to the SuperStatus key in the main settings property list.
• New IBM Notifier 3.2.3 is automatically installed. (Thanks to @SMartorelli for his dedication to the project!)
• Resolved an issue that prevented non-system updates from being targeted for installation.
• Resolved an issue that resulted in inaccurate deferral counts.
• Updated spreadsheet (tab separated values) for migrating to super v5.1.0 command line options.
• Updated spreadsheet (tab separated values) for migrating to super v5.1.0 managed preferences.
• Updated "All Options" example MDM configuration profile.
• Updated "All Options" example MDM property list.
• Updated Jamf Pro External Application Custom Schema for super v5.1.0. (Huge thanks to @tonyyo11 for maintaining this!)
• As always, typo fixes and improvements to both regular and verbose log output.
• super 5.1.0-rc2 SHA-256: fdd0891117983d9864b6c6e79af1321acfbe07c8a53dfd0f19900c364d41a9f6

Please refer to the Change log for full details.