Skip to content

fix(lume): remove com.apple.vm.networking from release entitlements - #1075

Merged
f-trycua merged 1 commit into
mainfrom
fix/lume-entitlements-remove-networking
Feb 11, 2026
Merged

fix(lume): remove com.apple.vm.networking from release entitlements#1075
f-trycua merged 1 commit into
mainfrom
fix/lume-entitlements-remove-networking

Conversation

@f-trycua

Copy link
Copy Markdown
Collaborator

Summary

  • Remove com.apple.vm.networking from lume.entitlements (used by release/notarized builds)

Problem

The com.apple.vm.networking entitlement is a restricted entitlement that requires a matching provisioning profile. Without one, macOS's AMFI (Apple Mobile File Integrity) kills the binary immediately on launch with error -413: No matching profile found — even for commands like lume ls that don't use bridged networking.

This was introduced in the bridged networking PR and makes the v0.2.78 release completely unusable.

Fix

Remove the entitlement from the release entitlements file. The entitlement remains in lume.local.entitlements for local development builds where users can provide their own provisioning profile.

Test plan

  • Build and sign with lume.entitlements — binary should launch without being killed
  • lume ls, lume run, lume serve all work normally
  • Bridged networking correctly errors when attempted (entitlement not present)

The com.apple.vm.networking entitlement is a restricted entitlement
that requires a provisioning profile. Without one, macOS kills the
binary on launch (AMFI error -413: "No matching profile found"),
making lume completely unusable — even for commands that don't use
bridged networking.

Remove the entitlement from lume.entitlements (used by release builds)
so that signed/notarized binaries work out of the box. The entitlement
remains available in lume.local.entitlements for local builds where
users have the appropriate provisioning profile.
@vercel

vercel Bot commented Feb 11, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs Building Building Preview, Comment Feb 11, 2026 5:53am

Request Review

@coderabbitai

coderabbitai Bot commented Feb 11, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)
  • rabbit

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch fix/lume-entitlements-remove-networking

Tip

Issue Planner is now in beta. Read the docs and try it out! Share your feedback on Discord.


Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions

Copy link
Copy Markdown
Contributor

📦 Publishable packages changed

  • lume

Add release:<service> labels to auto-release on merge (+ optional bump:minor or bump:major, default is patch).
Or add no-release to skip.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant