Startscream ITMS-91061: Missing privacy manifest

[Tristan-Hancock]

Description

Amplify Data store is still using starscreams previous version of Starscream (= 4.0.4) the updated version of 4.0.6 contains the required manifest and is hence causing an issue for my App store app review as the current Amplify Datastore is using starscream 4.0.4.
Is there a work around this? Or is there an Amplify datastore update coming anytime soon?

Categories

• Analytics
• API (REST)
• API (GraphQL)
• Auth
• Authenticator
• DataStore
• Notifications (Push)
• Storage

Steps to Reproduce

Uploading the app build via xcode and distribute to app store connect
submit app for review
Comes as invalid binary- Reason - ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/Starscream.framework/Starscream”, which includes Starscream, an SDK that was identified in the documentation as a commonly used third-party SDK. If a new app includes a commonly used third-party SDK, or an app update adds a new commonly used third-party SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.

Screenshots

Platforms

• iOS
• Android
• Web
• macOS
• Windows
• Linux

Flutter Version

3.24.4

Amplify Flutter Version

amplify_datastore: ^2.6.0

Deployment Method

Amplify CLI (Gen 1)

Schema

[ekjotmultani]

Hi @Tristan-Hancock, we previously had this version of Starscream pinned due to constraints on another dependency, however those constraints seem to be lifted so we can get this package updated

[Tristan-Hancock]

Thank you for this , is there a timeline for this package update? This is sort of a release block for me and a bit urgent , just to keep my team informed.

[Tristan-Hancock]

Hey, Will the starscream package be uploaded in the next update? the current 2.6.1 datastore does not contain the [Chore/dependency bumps #6026] , any timeline for this? Will it be in amplify 2.6.2? Tried to upload a new IOS build with 2.6.1 and still getting this ,

[tyllark]

Hello @Tristan-Hancock I'm sorry the changes did not make it into Amplify 2.6.1. The StarScream update was bundled it with other dependency changes that introduced CI/CD error. Ill make a separate branch with the StarScream changes for your verification and as a temporary workaround for getting your release out.