Release_iOS-17-4_macOS-14-4

apple · Mar 5, 2024 · 39e2a82 · 39e2a82
1 parent 1cb86e0
commit 39e2a82
Show file tree

Hide file tree

Showing 298 changed files with 4,808 additions and 1,277 deletions.
diff --git a/LICENSE.txt b/LICENSE.txt
@@ -1,4 +1,4 @@
-Copyright © 2022-2023 Apple Inc.
+Copyright © 2022-2024 Apple Inc.
 
 Permission is hereby granted, free of charge, to any person obtaining a
 copy of this software and associated documentation files (the

diff --git a/README.md b/README.md
@@ -6,12 +6,34 @@ This repository contains Apple's Device Management Client schema data for the MD
 
 This release corresponds to the following OS versions
 
-| OS      | Version |
-|---------|---------|
-| iOS     | 17.2    |
-| macOS   | 14.2    |
-| tvOS    | 17.2    |
-| watchOS | 10.2    |
+| OS       | Version |
+|----------|---------|
+| iOS      | 17.4    |
+| macOS    | 14.4    |
+| tvOS     | 17.4    |
+| visionOS |  1.1    |
+| watchOS  | 10.4    |
+
+## Important Release Notes
+
+### visionOS support
+
+The 17.4/14.4 release adds a `visionOS` value to the `supportedOS` key to indicate support for visionOS devices.
+
+### Declarative device management supervision state
+
+The 17.4/14.4 release includes a major change to the `allowed-enrollments` key in declarative device management schema items. A new `supervised` value has been added. So now:
+
+* `supervised` is used to indicate support for a supervised device enrollment
+* `device` is used to indicate support for an unsupervised device enrollment.
+
+On macOS, device enrollments are always supervised, so the `device` value has been replaced by `supervised` in all `allowed-enrollments`.
+
+On other platforms, `supervision` has been added or `device` has been removed, as appropriate for actual support.
+
+### Declarative device management combinetype values
+
+The 17.4/14.4 release has renamed the `enum-lowest` and `enum-highest` combinetype values to `enum-first` and `enum-last` respectively.
 
 ## What's Available
 

diff --git a/declarative/declarations/activations/simple.yaml b/declarative/declarations/activations/simple.yaml
@@ -9,6 +9,8 @@ payload:
       introduced: '13.0'
     tvOS:
       introduced: '16.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/assets/credential.acme.yaml b/declarative/declarations/assets/credential.acme.yaml
@@ -9,6 +9,8 @@ payload:
       introduced: '14.0'
     tvOS:
       introduced: '17.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/assets/credential.certificate.yaml b/declarative/declarations/assets/credential.certificate.yaml
@@ -9,6 +9,8 @@ payload:
       introduced: '14.0'
     tvOS:
       introduced: '17.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/assets/credential.identity.yaml b/declarative/declarations/assets/credential.identity.yaml
@@ -9,6 +9,8 @@ payload:
       introduced: '14.0'
     tvOS:
       introduced: '17.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/assets/credential.scep.yaml b/declarative/declarations/assets/credential.scep.yaml
@@ -9,6 +9,8 @@ payload:
       introduced: '14.0'
     tvOS:
       introduced: '17.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/assets/credential.userpassword.yaml b/declarative/declarations/assets/credential.userpassword.yaml
@@ -10,6 +10,8 @@ payload:
       introduced: '13.0'
     tvOS:
       introduced: '16.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/assets/credentials/acme.yaml b/declarative/declarations/assets/credentials/acme.yaml
@@ -9,6 +9,8 @@ payload:
       introduced: '14.0'
     tvOS:
       introduced: '17.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/assets/credentials/identity.yaml b/declarative/declarations/assets/credentials/identity.yaml
@@ -9,6 +9,8 @@ payload:
       introduced: '14.0'
     tvOS:
       introduced: '17.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/assets/credentials/scep.yaml b/declarative/declarations/assets/credentials/scep.yaml
@@ -9,6 +9,8 @@ payload:
       introduced: '14.0'
     tvOS:
       introduced: '17.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/assets/credentials/usernameandpassword.yaml b/declarative/declarations/assets/credentials/usernameandpassword.yaml
@@ -9,6 +9,8 @@ payload:
       introduced: '13.0'
     tvOS:
       introduced: '16.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/assets/data.yaml b/declarative/declarations/assets/data.yaml
@@ -9,6 +9,8 @@ payload:
       introduced: '14.0'
     tvOS:
       introduced: '17.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/assets/useridentity.yaml b/declarative/declarations/assets/useridentity.yaml
@@ -9,6 +9,8 @@ payload:
       introduced: '13.0'
     tvOS:
       introduced: '16.0'
+    visionOS:
+      introduced: '1.1'
     watchOS:
       introduced: '10.0'
 payloadkeys:

diff --git a/declarative/declarations/configurations/account.caldav.yaml b/declarative/declarations/configurations/account.caldav.yaml
@@ -6,6 +6,7 @@ payload:
     iOS:
       introduced: '15.0'
       allowed-enrollments:
+      - supervised
       - device
       - user
       - local
@@ -17,15 +18,24 @@ payload:
     macOS:
       introduced: '13.0'
       allowed-enrollments:
-      - device
+      - supervised
       - user
       - local
       allowed-scopes:
       - user
     tvOS:
       introduced: n/a
+    visionOS:
+      introduced: '1.1'
+      allowed-enrollments:
+      - device
+      - user
+      - local
+      allowed-scopes:
+      - system
     watchOS:
       introduced: n/a
+  apply: multiple
   content: A CalDAV configuration defines a CalDAV calendar and reminders account
     for a user.
 payloadkeys:

diff --git a/declarative/declarations/configurations/account.carddav.yaml b/declarative/declarations/configurations/account.carddav.yaml
@@ -6,6 +6,7 @@ payload:
     iOS:
       introduced: '15.0'
       allowed-enrollments:
+      - supervised
       - device
       - user
       - local
@@ -17,15 +18,24 @@ payload:
     macOS:
       introduced: '13.0'
       allowed-enrollments:
-      - device
+      - supervised
       - user
       - local
       allowed-scopes:
       - user
     tvOS:
       introduced: n/a
+    visionOS:
+      introduced: '1.1'
+      allowed-enrollments:
+      - device
+      - user
+      - local
+      allowed-scopes:
+      - system
     watchOS:
       introduced: n/a
+  apply: multiple
   content: A CardDAV configuration defines a CardDAV contacts account for a user.
 payloadkeys:
 - key: VisibleName

diff --git a/declarative/declarations/configurations/account.exchange.yaml b/declarative/declarations/configurations/account.exchange.yaml
@@ -7,6 +7,7 @@ payload:
     iOS:
       introduced: '15.0'
       allowed-enrollments:
+      - supervised
       - device
       - user
       - local
@@ -18,15 +19,24 @@ payload:
     macOS:
       introduced: '13.0'
       allowed-enrollments:
-      - device
+      - supervised
       - user
       - local
       allowed-scopes:
       - user
     tvOS:
       introduced: n/a
+    visionOS:
+      introduced: '1.1'
+      allowed-enrollments:
+      - device
+      - user
+      - local
+      allowed-scopes:
+      - system
     watchOS:
       introduced: n/a
+  apply: multiple
   content: This payload configures an Exchange ActiveSync account on an iOS device.
 payloadkeys:
 - key: VisibleName
@@ -72,6 +82,8 @@ payloadkeys:
   supportedOS:
     iOS:
       introduced: n/a
+    visionOS:
+      introduced: n/a
   type: <integer>
   presence: optional
   content: The port number of the EWS server. The system uses this only when this
@@ -81,6 +93,8 @@ payloadkeys:
   supportedOS:
     iOS:
       introduced: n/a
+    visionOS:
+      introduced: n/a
   type: <string>
   presence: optional
   content: The path of the EWS server. The system uses this only when this declaration
@@ -90,6 +104,8 @@ payloadkeys:
   supportedOS:
     iOS:
       introduced: n/a
+    visionOS:
+      introduced: n/a
   type: <string>
   presence: optional
   content: The external hostname of the EWS server (or IP address). This is a required
@@ -100,6 +116,8 @@ payloadkeys:
   supportedOS:
     iOS:
       introduced: n/a
+    visionOS:
+      introduced: n/a
   type: <integer>
   presence: optional
   content: The external port number of the EWS server. The system uses this only when
@@ -109,6 +127,8 @@ payloadkeys:
   supportedOS:
     iOS:
       introduced: n/a
+    visionOS:
+      introduced: n/a
   type: <string>
   presence: optional
   content: The external path of the EWS server. The system uses this only when this

diff --git a/declarative/declarations/configurations/account.google.yaml b/declarative/declarations/configurations/account.google.yaml
@@ -6,6 +6,7 @@ payload:
     iOS:
       introduced: '15.0'
       allowed-enrollments:
+      - supervised
       - device
       - user
       - local
@@ -17,15 +18,24 @@ payload:
     macOS:
       introduced: '13.0'
       allowed-enrollments:
-      - device
+      - supervised
       - user
       - local
       allowed-scopes:
       - user
     tvOS:
       introduced: n/a
+    visionOS:
+      introduced: '1.1'
+      allowed-enrollments:
+      - device
+      - user
+      - local
+      allowed-scopes:
+      - system
     watchOS:
       introduced: n/a
+  apply: multiple
   content: A Google configuration defines a Google account for a user. The user will
     be prompted to enter their credentials shortly after the configuration successfully
     installs.

diff --git a/declarative/declarations/configurations/account.ldap.yaml b/declarative/declarations/configurations/account.ldap.yaml
@@ -6,6 +6,7 @@ payload:
     iOS:
       introduced: '15.0'
       allowed-enrollments:
+      - supervised
       - device
       - user
       - local
@@ -17,15 +18,24 @@ payload:
     macOS:
       introduced: '13.0'
       allowed-enrollments:
-      - device
+      - supervised
       - user
       - local
       allowed-scopes:
       - user
     tvOS:
       introduced: n/a
+    visionOS:
+      introduced: '1.1'
+      allowed-enrollments:
+      - device
+      - user
+      - local
+      allowed-scopes:
+      - system
     watchOS:
       introduced: n/a
+  apply: multiple
   content: An LDAP configuration defines an LDAP directory account for a user.
 payloadkeys:
 - key: VisibleName