[Bug] maui-iap 2.0.0 uses a framework built with a beta version of xcode

[softlion]

Library

maui-iap

Library version

maui-iap 2.0.0

Affected platform

iOS

Store

App Store

Environment

.NET 10
AppStore IPA built with xcode 26.6

What happened?

Build was accepted by testflight, but rejected by AppStore validation.

Rejection Message:

The value provided for the sdk portion of LC_BUILD_VERSION in MyApp.app/Frameworks/OpenIAP.framework/OpenIAP is 27.0 which is greater than the maximum allowed value of 26.5.

Expected behavior

Don't build the dependant framework using a beta version of xcode (ie: 27).

Reproduction steps

Build an app which uses OpenIAP maui, publish it to testflight and try to use the binary to publish it to the appstore. It will be rejected after 10mn.

Logs or stack trace

Additional context

No response

[softlion]

The bug is in .github/workflows/release-maui.yml:

  publish:
    needs: [validate, validate-multitarget]
    # Rebuild the exact native sidecar that is packed into the NuGet on the
    # same Xcode 27 image used by validation.
    runs-on: xcode-27
    timeout-minutes: 60
    steps:

xcode-27 is still in beta, appstore rejects apps bound to a library built with a beta version.

[hyochan]

Thanks for the detailed report and for identifying the workflow configuration. This is fixed by #265 and released in OpenIap.Maui 2.0.1.

We downloaded the public NuGet package and verified the packaged Apple binding resources for both iOS and Mac Catalyst. Every binary records SDK 26.5 with LD 1267.0, and no coverage sections are present.

Please upgrade and rebuild the IPA before resubmitting:

dotnet add package OpenIap.Maui --version 2.0.1

Verification and release evidence:

• Fix: fix: ship app store-safe apple artifacts #265
• Release workflow: https://github.com/hyodotdev/openiap/actions/runs/30710282164
• GitHub Release: https://github.com/hyodotdev/openiap/releases/tag/maui-iap-2.0.1
• Published NuGet package: https://www.nuget.org/packages/OpenIap.Maui/2.0.1
• Release notes: https://openiap.dev/docs/updates/releases

The same App Store toolchain provenance checks were also applied to the precompiled Apple frameworks shipped with Godot 3.0.1.