XCFrameworks are not codesigned

[ori-hime]

Third-party SDK XCFrameworks now need to be codesigned, not just the framework binaries within them.
This will be enforced by Xcode at some point in Spring 2024.
https://developer.apple.com/news/?id=r1henawx
https://developer.apple.com/news/?id=3d8a9yyh

I am using FMDB (v2.7.8) using Carthage.

I checked whether the SDK was signed using the command and Xcode15's Signature field to check the signature below, but
SDK signature could not be verified.

I used the following command:
❯ codesign -dvvv --display --deep [library path omitted]FMDB.xcframework
[Library path omitted]FMDB.xcframework: code object is not signed at all

When will the SDK signature be released?

[ccgus]

I think you should just sign this yourself?

[ori-hime]

Apple has mandated that FMDB, all need to include privacy manifest and signature.
They're specifically called out in Upcoming third-party SDK requirements.
https://developer.apple.com/support/third-party-SDK-requirements/

https://developer.apple.com/videos/play/wwdc2023/10060
Judging from the announcement,, it seems that SDK signing should be done by the SDK developer.
Quotes from the video＞SDK developers: Adopt signatures and manifests. These are super helpful to your customers.

For the reasons listed above, we would like you to sign the SDK.

[ori-hime]

@ccgus
We would like you to sign the SDK?

[wackey39]

@ccgus
There is a demand for me as well. Can you release a stable version of FMDB .xcframework signed by the FMDB developers?

Thanks