App Auto-Patch combines local application discovery, an Installomator integration, and user-friendly swiftDialog prompts to automate application patch management across Mac computers.
App Auto-Patch simplifies the process of inventorying installed applications and patching them, eliminating the need to create multiple Smart Groups, Policies, Patch Management Titles, etc., within Jamf Pro. It provides an easy way to keep end users' applications updated with minimal effort.
- New Version Comparison Method options
- New
versionComparisonMethodkey with the optionsIS_AT_LEASTandEQUAL_TO IS_AT_LEAST: Checks if the currently installed version is the same or greater than the new version available. Utilizes the "Is-At-Least" function.EQUAL_TO: Checks if the currently installed version is equal to the new version available
- New
- Optional Label logic updates
- Optional Labels will now be checked for both Installed and Update Available
- Breaking Change: Optional labels will be checked during the discovery phase. If you use Optional labels and had previously disabled the discovery workflow, it must now be enabled for the labels to be checked
- You can use an asterisk
*to ignore all labels, and any optional labels will be omitted from the ignore list to be checked if installed and update available
- Option to disable Installomator Debug Fallback for version comparison
- Key:
VersionComparisonInstallomatorFallback<true/>|<false/> - TRUE (Default): If AAP is unable to do a version comparison due to a missing
appNewVersionin Installomator, it falls back to using Installomator Debug mode, which will usually indicate if there is a new version or not for an app. Setting this key to TRUE will keep this functionality enabled - FALSE: Disables the Installomator Debug Fallback. If the
appNewVersionis unavailable, AAP will ignore the app and not add it to the queue
- Key:
- Added Zoom Call Active Check option: When enabled, if a user starts the install process and then starts a Zoom call, App Auto-Patch will skip the Zoom update to prevent closing Zoom in the middle of the meeting
- Default is set to Enabled
- Managed Preference Key:
<key>ZoomCallActiveCheck</key><true/>|<false/> - CLI Options:
--zoom-call-active-check-enabled--zoom-call-active-check-disabled
- Updated info dialog with more information and easier-to-read formatting (PR #184)
- Bolded labels and SupportTeamName
- Added a new section called "Software Information."
- Added line for Installomator version (both version and versiondate)
- Added the option to hide Telephone, Email, and/or Help Website by setting their value to "hide."
- Renamed default label from "Started" to "AAP Started" to clarify timestamp intent
- Renamed default software-version labels for a unified look
- Updated webhooks for both Slack and Teams (PR #185)
- Renamed “Microsoft Intune” to “Intune” to prevent the button text from being truncated.
- Shortened the title and added emojis for quick identification of success and failure.
- Added version information for OS, Installomator, and AAP.
- Removed the computer record URL since the button serves the same purpose.
- Removed the hostname because it often matches the S/N, and the S/N is easier to search.
- Made the card more compact and information-dense.
- Fixed label matching to ensure all labels are correctly added to arrays without duplicates (#197)
- Fixed NextAutoLaunch logic to prevent AAP from launching after install when WorkflowDisableRelaunch is set to TRUE
- Added logic to pull and use the targetDir value from Installomator labels if present, and the app is not in the /Applications folder
- Added logic to pull folderName value from Installomator labels if present
- Added logic to pull versionKey value from Installomator labels if present
- Added various verbose logging
- Removed redundant Self Update Enabled logic
- Added logic to the Installomator Debug Fallback to check output for "No previous app found" and ignore the app if so
- Added missing
display_string_deferral_selecttitlekey - Various spelling and case corrections throughout
- Fixed an issue preventing the monthly patching cadence flow from being triggered if no apps were found that need updates (Thanks @dan-snelson)
- Added logic to skip pre-validation for Apple apps that are missing a TeamID (#198)
- Added build number to script
- Modified self update logic to use build number (This will allow beta versions to be updated to the final release)
- Fixed a date format issue when using the monthly patching cadence that was causing AAP to restart upon completion immediately
- Modified Installomator Debug Fallback to check for packageID if type = pkg or pkgInDmg or pkgInZip, and skip if packageID is blank and unable to complete version comparison
- Moved get_installomator function to run before populating installomator app labels. This ensures the latest installomator data is retrieved before processing label variables, so they are correctly populated
- Added a check to make sure the Installomator download is successful. If the labels are missing, AAP will retry getting Installomator twice. On the third failure, AAP will quit and not move forward
- Added a warning in the log if the installomator label file count is less than the threshold (1000)
- Adjusted version comparison logic to only allow the installomator version comparison fallback to run if
appNewVersionis not populated. This will speed up the run time - Fixed a bug that allowed AAP to restart after install when
WorkflowDisableRelaunchwas set to TRUE (#199) - Adjusted deferral and patching dialog sizes to be consistent
- Added logic to replace whitespace in version numbers with
-to allow theis-at-leastfunction to work correctly with version numbers containing spaces (ex, sublimemerge) - Created a helper function to identify the appPath and icon path for dialogs correctly. Overhauled all dialog logic to utilize the new helper function
- Created a persistent one-time verbose log that will contain the verbose log output from the most recent run. This log is cleared at the beginning of each run
- Fixed order of
get_installomatorandget_preferences - Complete re-write of logic to populate app names, icons, status, and statustext in the various dialogs: Fixes missing icons, inconsistent app names, statu,s and statustext updates
- Flipped buttons on the deferral dialog so that Defer is the primary button, preventing accidental installs. Renamed
ContinuetoInstall Now
- Added App Auto-Patch Script Self Update functionality (Feature Request #128)
- Managed Config: Configure using the SelfUpdateEnabled | SelfUpdateFrequency keys
- CLI: Configure using the --self-update-enabled | --self-update-disabled | --self-update-frequency triggers. Force update using --force-self-update-check trigger
- Monthly Patching Cadence Functionality: Added the ability to set a Monthly Patching Cadence (e.g., Patch Tuesday).
- MonthlyPatchingCadenceEnabled (TRUE|FALSE)
- MonthlyPatchingCadenceOrdinalValue: Week of the month you want AAP to be scheduled (first|second|third|fourth|fifth|final)
- MonthlyPatchingCadenceWeekdayIndex: Day of the week you want AAP to be scheduled (sunday|monday|tuesday|wednesday|thursday|friday|saturday)
- MonthlyPatchingCadenceStartTime: Local time you want AAP to be scheduled (ex,
09:00:00)
- Standardize timestamp format and use actual timezones instead of hard-coded UTC. Cleaned up and adjusted NextAutoLaunch format to use date datatype (#152)
- Added check for appName in Installomator label to populate the correct app name to improve app detection (Issue #155)
- Updated logic to populate app icons correctly for apps not located in the /Applications folder
- Added logic to check for appCustomVersion in Installomator label to pull the correct version of installed apps
- Fixed logic to clear the targetDir variable when scrubbing Installomator label fragments
- Fixed case on variables (Issue #178)
- Added logic to ignore PWA apps from Chrome & Edge (Issue #178)
- Added --reset-labels trigger functionality (Issue #171)
- Fixed error extraction from Installomator logs. Used in webhooks. The previous implementation returned null. (PR #174)
- Fixed Jamf Self Service Icon Overlay & added support for Jamf Self Service+ (PR #173)
- Added option to set the Dialog Icon to a custom filepath or URL via MDM or CLI (#179)
- New
restart_aapfunction to handle all LaunchDaemon restart logic - Fixed a bug that would result in a
Print: Entry, ":userInterface:dialogElements", Does Not Existmessage if no language entries exist in the PLIST - Logging improvements
- Added receipt support for patching events. Each app patched by App Auto Patch now writes a JSON receipt into the AAP management folder
/Library/Management/AppAutoPatch/receipts. Successful and failed patch attempts are recorded. - New
AAP-LatestPatchesJamf Pro EA makes reporting on app patching easy. The script will report the successful and failed patch attempts along with a timestamp, version, Installomator exit code, and status.
- Added multi-language support: Entries can be added to the managed configuration profile for multiple languages, based on the setting for the user in macOS
- Added --workflow-install-now-silent option which runs through the workflow without deferrals but does not display dialogs
- Added option to disable Installomator Updates using InstallomatorUpdateDisable TRUE,FALSE
- Added dialogTargetVersion and set to version 2.5.5 as minimum required due to issues with the deferral menu on older versions
App Auto-Patch automatically installs itself and the necessary components anytime it's run from outside the working folder /Library/Management/AppAutoPatch/
For more information on getting started and testing, please visit the AAP Wiki page for more information
- After installation, you can run
sudo appautopatchfrom the terminal with any parameters to configure as you'd like. Examples:
sudo appautopatch --interactiveMode=2 --workflow-install-now --deadline-count-focus=2 --deadline-count-hard=4 --ignored-labels="microsoft* googlechrome* jamfconnect zoom* 1password* firefox* swiftdialog" --verbose-mode
Or trigger the script directly to perform an install with the parameters you'd like. Example:
./App-Auto-Patch-via-Dialog.zsh --interactiveMode=2 --workflow-install-now --deadline-count-focus=2 --deadline-count-hard=4 --ignored-labels="microsoft* googlechrome* jamfconnect zoom* 1password* firefox* swiftdialog" --verbose-mode
-
You can find a mapping of 2.x variables to 3.5.0 configuration and command line options from the following TSV file: Migration Options
-
Profile Manifests to assist with building a configuration profile can be found in the Resources folder: Profile Manifests
-
An example configuration profile and a profile & plist containing all available options can be found in the resources: Example Configurations
-
To reset AAP to defaults:
./App-Auto-Patch-via-Dialog.zsh --reset-defaults -
Clear Ignored, Required, and Optional Labels:
./App-Auto-Patch-via-Dialog.zsh --reset-labels -
Uninstall App Auto Patch:
./App-Auto-Patch-via-Dialog.zsh --uninstall
Please review the wiki: App Auto-Patch Wiki
You can also join the conversation at the Mac Admins Foundation Slack in channel #app-auto-patch.
To everyone who has helped contribute to App Auto-Patch, including but not limited to:
- Robert Schroeder (@robjschroeder)
- Andrew Spokes (@TechTrekkie)
- Dan Snelson (@dan-snelson)
- Andrew Clark (@drtaru)
- Andrew Barnett (@andrewmbarnett)
- Trevor Sysock (@bigmacadmin)
- Bart Reardon (@bartreardon)
- Charles Mangin (@option8)
- Gil Burns (@gilburns)
- Armin Briegel (@scriptingosx)
- Isaac Ordonez (@issacatmann)
- Søren Theilgaard (@Theile)
- Adam Codega (@acodega)