Sparkle used to try to fix invalid URLs, but now it's stricter. When upgrading, make sure your URLs in the appcast don't contain un-encoded non-ASCII characters.
JavaScript is disabled in release notes' HTML, unless you add SUEnableJavaScript to app's Info.plist.
- Disable javascript by default and make it opt-in (Zorg)
- URL-encoding of appcast URLs is preserved (Kornel Lesiński)
- Delegate is asked for fallback updates if delta update fails (Kornel Lesiński)
- Fixed crash on 10.7 - subscript operator not available (kleuter)
- Fixed check of feed URL before delegate had a chance to set it (Kornel Lesiński)
- Re-added support for password-protected dmg images (Andrew K. Boyd)
- Added warning about ATS blocking (Kornel Lesiński)
- Translation fixes for pt-BR. (vitu)
- Add some Japanese lozalized strings (1024jp)
- Made test app available in all languages (LIU Dongyuan / 柳东原)
- Czech localizations update (Frantisek Erben)
- Removed a test resource from the framework bundle (Karl Moskowski)
- Test if the updated app is the frontmost one (Zorg)
- UI Tests for the Test Application (Zorg)
OS X 10.7 or later required
Make sure you add <sparkle:minimumSystemVersion>10.7</sparkle:minimumSystemVersion> tag to <item>s in your appcast. Sparkle will crash on Snow Leopard.
HTTPS or ATS exception required
OS X 10.11 deprecated HTTP and blocks updates unless you use HTTPS or disable App Transport Security.