2026-05-15
Highlights (5.1.x)
- Suport for macOS 26 Tahoe.
- New ability to target specific macOS versions (ex. 15.6.1) for both minor updates and major upgrades.
- Completely rearchitected
superpreferences mechanism allows for alternate configuration workflows. In other words, you can now create multiple differentsuperworkflow configurations and active them on an as-needed basis. - Significantly improved macOS minor update workflow is fully compatible on systems with all built-in automatic software update options enabled.
- New scheduling options for automatic deferrals when provisioning new systems and when you want to delay the start of a workflow after zero day.
- New workflow options for installing non-system software updates.
- Significant quality of life improvements for gathering information about the super workflow configuration including a new
super-audit.logandsuper-metrics.log.
Highlights (5.0.x)
- Suport for macOS 15 Sequoia.
- New scheduled installation workflows allow administrators or the end user to specify a date and time for the installation of macOS updates/upgrades, Jamf Pro Policies, or enforced system restarts.
- New schedule workflow active option allows administrators to set exactly when the
superworkflow is active, thus allowing for "maintenance windows". - MacAdmin's SOFA integration allows schedule and deadline options to align with macOS release dates (as opposed to when
superdiscovers a macOS release). - Completely rearchitected main
superlogic so all workflow options can be permanent (via configuration profile) or temporary until the requested workflow is completed. - Completely rearchitected software update/upgrade discovery to significantly improve reliability, performance, and improve support for native macOS software update restrictions deferral.
- Significantly improved behavior for alternate workflow targets (non-system updates, Jamf Pro Policies, and enforced system restarts) now support all deferral, schedule, deadline, and display options.
- Even more user interface customization options.
- Please visit the
superWiki for full details!
Compatibility Notes (5.x)
super5.x requires macOS 11 or newer.- Several
super4.x command line options and managed preferences are not compatible withsuper5.x - Most
super3.0 command line options and managed preferences are not compatible withsuper5.x - Previously saved
super3.0 and 4.x Apple silicon authentication credentials are automatically migrated the first timesuper5.x runs. - Refer to this spreadsheet (tab separated values) for migrating
supercommand line options. - Refer to this spreadsheet (tab separated values) for migrating
supermanaged preferences. - Updated example MDM configuration profiles.
- Updated Jamf Pro External Application Custom Schema.
- Updated Jamf Pro Extension Attribute scripts.
Known Issues (5.x)
- The
superworkflow does not currently support Declarative Device Management (DDM) software update settings. You should continue to use traditional MDM configuration profiles to enforce software update settings. - There are currently no publicly available Background Security Improvement (BSI, formerly named Rapid Security Response) updates for any version of macOS. As such, production BSI update workflows have not been validated against this version of
super. - The Jamf Pro new Managed Software Updates feature remains unreliable if the workflow target is not the latest minor update or major upgrade. In the mean time, the legacy Jamf Pro software update API remains stable (although deprecated) and local authentication is always the most reliable.
Specific Changes (5.1.0-rc5)
- New suport for Jamf Pro 11.28 when using Jamf Pro API authentication workflows. Jamf Pro 11.28 also requires that the API credential used by
superhas the additional API privilegeView MDM command information in Jamf Pro API. Prior versions ofsuperdo not support Jamf Pro 11.28 when using Jamf Pro API authentication workflows. - New
<key>AuthJamfManagementID</key> <string>$MANAGEMENTID</string>managed preference allowssuperto determine the computer's Jamf Pro Management ID without making an additional Jamf Pro API call. If you are using Jamf Pro 11.28 with Jamf Pro API authentication workflows then you must deploy this new managed preference key or allow the API credential used bysuperto have the Jamf Pro API privilegeRead Computers. - New warning when the
superis unable to determine user Focus status if the process that startedsuperdoesn't have Full Disk Access permissions. - Added a specific
$PATHto avoid a myriad of issues that could be due to the unintentional use of non-built-in binaries. - New workaround to resolve a macOS issue that prevents the system from automatically downloading new macOS updates if an older update is still cached to the system. In this case, the
superworkflow will attempt to download the new update instead of waiting for the system automatic update. - New workaround to resolve a macOS issue where the
softwareupdatecommand fails to report the completion of a succesfull macOS download. - Improved handling of the
--deferral-timer-menuoption to prevent issues due to invalid configurations. - Improved handling of the
--scheduled-install-reminderoption to prevent issues due to invalid configurations. - Resolved several issues regarding automatic download deferrals and deadline timeouts. (Thanks to @cfsnate for spotting and resolving these issues!)
- Resolved several issues regarding scheduled install reminders. (Thanks to @jtwillbanks for spotting and helping resolve these issues!)
- Resolved an issue where the restart validation workflow would fail to complete if the system had not yet installed all security updates (like XProtect).
- Resolved an issue where the MDM enrollment URL could not be determined if an MDM debug configuration profile was installed. (Thanks to @Sot3 for spotting and resolving this issue!)
- Updated spreadsheet (tab separated values) for migrating to
superv5.1.0 managed preferences. - Updated "All Options" example MDM configuration profile.
- Updated "All Options" example MDM property list.
super5.1.0-rc5 SHA-256: 15e08046d9d40eff081527299b8f7770a910d255bf32425df3cf4ec3e0bce76c