v2025.1

Notes

If you're migrating from Google Santa, please see the Migration Guide for details on how to upgrade.

Santa documentation can be found at northpole.dev.

Fixed

❗ Fixed an issue where santactl could sometimes hang for a short time before producing output
❗ Fixed issue where there was a small chance some random data could be appended to telemetry output when using EventLogType=syslog

Changed

↔️ The keyboard shortcut for copying details from the UI changed to "⇧ ⌘ c"
↔️ When block events occur while no user is logged in, once a user does log in the most recent 10 notifications are presented (instead of the oldest 10 notifications)
↔️ StaticRule rule dictionary keys are now case insensitive
↔️ Standalone Mode (BETA) will now hold an executable up while awaiting user approval instead of outright denying and requiring the user to re-execute the binary

Added

➕ New telemetry event types: clone and copyfile
➕ Executable entitlements, signing status, and codesigning flags are now included in events sent to the sync server
➕ The sync_type field has been added to the Postflight Request message of the sync protocol to indicate the type of sync that was performed
➕ Japanese localization

What's Changed

• Project: Add labeler workflow by @russellhancox in #175
• Remove auto-labeling for build file changes by @mlw in #176
• gui: Update keyboard shortcut for copy details button by @russellhancox in #173
• Add entitlements to sync protocol by @mlw in #163
• TestGUI: Fix missing replyCallback, make labels in UI verbatim. by @russellhancox in #178
• Restructure Watch Items objects to prepare for Proc FAA by @mlw in #161
• initial Japanese localization by @arubdesu in #177
• gui: Use interpolation where needed in strings by @russellhancox in #180
• Add ring buffer implementation by @mlw in #181
• Use a deque for the ring buffer for better dequeue performance by @mlw in #182
• Standalone: Switch to a hold-and-ask model (part 1) by @russellhancox in #174
• gui: Fix the 'prevent future notifications' label in English by @russellhancox in #183
• Make SNTRule initWithDictionary case insensitive by @pmarkowsky in #179
• Project: Stop pointing at my fork of MOLXPCConnection by @russellhancox in #185
• Rework how valid rule IDs are tracked by @mlw in #184
• Add signing status and cs flags to sync proto by @mlw in #186
• Track ask and hold mode atomically while processing an event by @mlw in #187
• Add support for clone and copyfile telemetry events by @mlw in #189
• Add serializations for clone and copyfile by @mlw in #192
• Enforce max size to write for non-null-terminated buffer by @mlw in #193
• Up rules_apple to 3.16.1 to fix #190 by @the80srobot in #191
• Project: Update PR labeler, dependabot config, upgrade to bazel v8 by @russellhancox in #195
• sync: Populate sync_type field in postflight by @russellhancox in #196
• santactl status: fix hang when sync server is unresponsive by @tburgin in #199
• config: use CFPreferencesCopyAppValue and CFPreferencesAppValueIsForced by @tburgin in #200
• sync service: add support for APNS by @tburgin in #158
• apns: add basic message handling by @tburgin in #162
• Adopt ring buf for queued notifications by @mlw in #188
• Add mandatory load statements to prepare for upcoming Bazel changes by @mlw in #204
• Ensure ES doesn't cache incorrect hold and ask responses by @mlw in #201
• Forwards compatibility with string_view proto descriptor names by @gnoack in #206
• Bump dependency versions by @mlw in #207
• Add an optional step to add a TeamID rule for NPS Santa by @pmarkowsky in #203
• Standardized naming for critical sections based on mutex or GCD queue by @mlw in #208
• Clarify uniqueness properties of PID + pidversion by @gnoack in #209
• common: Add bootSessionUUID to SNTSystemInfo by @russellhancox in #210
• Remove pending standalone notifications on UI connection invalidation by @mlw in #213
• Ensure that non-glob faa path patterns are watched by @mlw in #212
• Address more future mandatory load requirements for Bazel by @mlw in #215
• Add back code to watch changes to our defaults domain by @mlw in #214
• Add licenses back to santa/BUILD by @kubalaguna in #198
• gui: Fix open button appearing when it shouldn't. by @russellhancox in #217
• Config: Adjust perms to 0644 for sync-state.plist. by @russellhancox in #218
• Ensure cached static rules in proper state on invalid configs by @mlw in #219
• gui: Simplify logic for button presentation by @russellhancox in #220
• Revert "Config: Adjust perms to 0644 for sync-state.plist." by @mlw in #222
• Idempotent config states (pt1) by @mlw in #221

New Contributors

• @arubdesu made their first contribution in #177
• @the80srobot made their first contribution in #191
• @gnoack made their first contribution in #206

Full Changelog: 2024.12...2025.1