bitten

Apple takes the App Store Epic contempt ruling to the Supreme Court over external payment links

Mon, 25 May 2026 09:00:00 +0200

Apple filed a petition with the U.S. Supreme Court in May 2026, asking the justices to review the contempt ruling in the Epic Games case — the finding that Apple violated the 2021 injunction by charging commissions on external payment links in the App Store.

Docker Model Runner: CVE-2026-33990 is a critical SSRF in the OCI registry token exchange

Mon, 25 May 2026 09:00:00 +0200

CVE-2026-33990 is a Server-Side Request Forgery vulnerability in Docker Model Runner, the component that handles model downloads and local AI execution within Docker Desktop. CVSS 3.1 score is 9.1 CRITICAL. The CVE was published on NVD on April 1, 2026. bitten’s Docker Desktop series had not yet covered it. The fix ships in Docker Desktop 4.67.0, released March 30, 2026.

macOS 27 will be the last Apple system to support Rosetta

Mon, 25 May 2026 09:00:00 +0200

In the Hello Developer newsletter for May 2026, published on May 12, Apple stated that macOS 27 will be the last release to include Rosetta. The communication does not appear in an official release note or a separate technical document: the text is in the Apple Silicon migration section of the monthly newsletter, with an explicit call to update Intel-based Mac apps before support ends.

WWDC26: developer sessions schedule, Group Labs with Apple engineers, 350 Swift Student Challenge winners

Mon, 25 May 2026 09:00:00 +0200

On May 18, Apple published the operational details for WWDC26: Group Labs with live Q&A sessions hosted by Apple engineers and designers, 350 Swift Student Challenge winners with 50 Distinguished Winners invited to Cupertino in person, and 36 finalist apps for the 2026 Apple Design Awards. These are the concrete announcements from this week, separate from the March announcement covering the general conference format.

App Store price update May 2026: South Korea and Latvia changes

Thu, 21 May 2026 09:15:00 +0200

On May 11, 2026, Apple updated its Tax and Price Updates page on Apple Developer News with two separate changes: a South Korea price adjustment effective May 28, and a new VAT rate in Latvia for Russian-language content, already in effect as of May 11. Neither change affects the full 175-storefront App Store network — both are geographically limited.

App Store Brazil betting license requirement: what developers need to submit

Thu, 21 May 2026 09:10:00 +0200

On May 8, 2026, Apple published a notice on its developer portal confirming that apps with fixed-odds betting features must hold a valid license from Brazil’s Secretariat of Prizes and Bets (SPA — Secretaria de Prêmios e Apostas) to remain available on the App Store in Brazil. The requirement applies to any app that selects “Yes” to the gambling question in the App Store Connect age rating questionnaire. Without a license, distribution in the Brazilian storefront stops.

Safari 26.5 WebKit CSS features: :open, random() changes, Origin API, and 63 bug fixes

Thu, 21 May 2026 09:05:00 +0200

Apple shipped Safari 26.5 alongside iOS 26.5, iPadOS 26.5, and macOS Tahoe 26.5, with the update also available for Sequoia and Sonoma. The WebKit Blog calls this “the largest May release of WebKit ever,” citing new CSS and Web Platform features plus 63 bug fixes across anchor positioning, scroll-driven animations, zoom rendering, WebRTC, and more. A handful of those fixes correct behavior that existing layouts may have been relying on, so testing on Safari 26.5 before assuming the release is a no-op is worth the time.

Docker Desktop 4.74.0: security update, Gordon AI goes GA, Mac fixes

Thu, 21 May 2026 09:00:00 +0200

Docker released Desktop 4.74.0 on May 19, 2026 with a security update at the center: content hash validation now protects the Electron GUI on Mac and other platforms against local resource tampering. The two preceding releases (4.72.0 and 4.73.0, which patched CVE-2026-31431 and fixed an Apple Silicon memory leak) had also focused on stability and security. This release adds more: Gordon AI moves to general availability with new pricing tiers, Docker Extensions are disabled by default, and three Mac-specific bugs get resolved.

WWDC26 in 27 days: what to prepare before the June 8 keynote

Tue, 12 May 2026 09:15:00 +0200

WWDC26 starts in 27 days. The keynote is on June 8 at 10:00 AM Pacific Time at Apple Park, with an in-person component for selected developers and students. Technical sessions continue online through June 12 with more than 100 videos and bookable labs with Apple engineers.

Docker Desktop 4.72.0 and 4.73.0: kernel CVE in containers and memory fix for Apple Silicon

Tue, 12 May 2026 09:10:00 +0200

Docker shipped two Desktop releases within five days: 4.72.0 on May 6 and 4.73.0 on May 11. The first contains an important security fix in the Linux VM kernel. The second focuses on stability, with a notable fix for Mac Apple Silicon users.

iOS 26.5 and macOS Tahoe 26.5: public release with 90+ CVEs patched

Tue, 12 May 2026 09:05:00 +0200

On May 11 Apple released the final public versions of iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, Xcode 26.5, tvOS 26.5, watchOS 26.5, and visionOS 26.5. The release candidate had been available since May 4 and reached the public unchanged in substance. The security content, which Apple does not pre-announce, is significant: iOS 26.5 closes more than 90 vulnerabilities.

iOS 18.7.9 and macOS Sequoia 15.7.7: 50+ CVEs for devices that can't run iOS 26

Tue, 12 May 2026 09:00:00 +0200

On May 11, alongside the public release of iOS 26.5, Apple shipped a coordinated batch of security updates for every device that cannot run iOS 26. The most substantial is iOS 18.7.9 and iPadOS 18.7.9, which covers more than 50 vulnerabilities on iPhone XS, XS Max, XR, and iPad 7th generation — the most recent models excluded from iOS 26, which requires iPhone 11 or later.

VS Code 1.118: remote Copilot control, semantic indexing everywhere, and Anthropic caching

Tue, 05 May 2026 11:00:00 +0200

VS Code 1.118, the April 2026 monthly update, shipped on April 29. The release is available for Mac as a Universal binary and as separate Intel and native Apple Silicon builds. Three changes are worth attention for developers using VS Code as their primary editor on macOS: remote control of Copilot CLI sessions, semantic indexing extended to all local workspaces, and prompt caching for Anthropic models.

iOS 26.5: RCS Universal Profile 3.0 brings E2E encryption between iPhone and Android

Tue, 05 May 2026 10:00:00 +0200

With the release candidate for iOS 26.5, shipped on May 4, Apple officially confirmed end-to-end encryption for RCS messages exchanged between iPhones and Android devices. The technical foundation is RCS Universal Profile 3.0, developed by the GSMA with Apple’s direct contribution, using the MLS (Messaging Layer Security) protocol as the cryptographic standard.

iOS 26.5 RC and Xcode 26.5 RC: all release candidates land on May 4

Tue, 05 May 2026 09:00:00 +0200

On May 4, Apple simultaneously released release candidates for every 26.5 platform: iOS 26.5 RC (build 23F75), iPadOS 26.5 RC (23F75), macOS Tahoe 26.5 RC (25F71), watchOS 26.5 RC (23T570), tvOS 26.5 RC (23L471), and visionOS 26.5 RC (23O471). Xcode 26.5 RC (build 17F42) shipped in the same batch. For devices still running iOS 18, iOS 18.7.9 and iPadOS 18.7.9 (build 22H355) also arrived.

Docker Desktop 4.71.0: Docker Model Runner Now Disabled by Default

Thu, 30 Apr 2026 11:00:00 +0200

Docker Desktop 4.71.0, released April 27, 2026, introduces a behavioral change that can silently break existing workflows: Docker Model Runner is now disabled by default. Anyone who configured it in a previous version will find the service off after updating, with no explicit error on first launch.

Apple Maps Ads Are Coming This Summer in the US and Canada

Thu, 30 Apr 2026 10:00:00 +0200

Apple has confirmed it will launch paid advertising in Apple Maps this summer, starting in the United States and Canada. The official announcement on March 24 presented the ad system as part of Apple Business, a new platform for businesses that went live on April 14. For developers building with MapKit or working on apps for small businesses, there are a few concrete things to think through before the system goes live.

iOS 26.5 Beta 4: Proximity Pairing and Live Activities for Third-Party Wearables in the EU

Thu, 30 Apr 2026 09:00:00 +0200

Apple seeded iOS 26.5 and iPadOS 26.5 beta 4 on April 27, build 23F5069b. There are no significant new consumer features in this release — no Siri updates, nothing visible for end users. What the beta does advance is two areas directly relevant to developers building for the European Union: the Digital Markets Act interoperability APIs for third-party wearables, and the infrastructure for Apple Maps advertising.

App Store Connect Analytics: 100 new metrics and the end of Sales and Trends

Tue, 28 Apr 2026 10:00:00 +0200

On March 25, 2026, Apple released the largest update to Analytics in App Store Connect since the platform launched: over 100 new metrics, In-App Purchase and subscription data, cohort analysis, and peer group benchmarks. The detail with the most operational weight for developers who use App Store Connect regularly: Sales and Trends will begin migrating into Analytics in mid-2026 and will be removed entirely by 2027.

App Store: monthly subscriptions with a 12-month commitment

Tue, 28 Apr 2026 09:00:00 +0200

Apple announced on April 27, 2026 a new payment structure for auto-renewable subscriptions on the App Store: subscribers pay monthly but commit to 12 payments. Developers can configure the new offer type today in App Store Connect; it will become visible to users starting with iOS 26.4 and later, with the full rollout expected alongside iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and visionOS 26.5 in May 2026.

Safari Technology Preview 242: CSS attr() Level 5, IndexedDB getAllRecords(), and closedby on dialog

Mon, 27 Apr 2026 10:00:00 +0200

On April 23, Apple released Safari Technology Preview 242 for macOS Tahoe and macOS Sequoia. The release adds CSS attr() from CSS Values Level 5, the getAllRecords() API on IndexedDB, the closedby attribute on <dialog>, and support for RTCRtpReceiver.jitterBufferTarget in WebRTC. No single addition is a headline shift, but together they close concrete gaps that anyone building web apps and PWAs on Safari will recognise.

Swift extension lands on Cursor and VSCodium via Open VSX

Mon, 27 Apr 2026 09:15:00 +0200

The official Swift extension is now published on Open VSX Registry, the open-source alternative to the Visual Studio Marketplace hosted by the Eclipse Foundation. On April 8, 2026, Tracy Miranda from Apple’s Swift Build and Packaging Workgroup announced that the extension is available on Cursor, VSCodium, AWS Kiro, and Google Antigravity — in addition to VS Code — without requiring manual downloads or unofficial sources.

iOS 26.4.2 and iOS 18.7.8: the bug that retained deleted notifications

Mon, 27 Apr 2026 09:00:00 +0200

On April 22, Apple released iOS 26.4.2 and iOS 18.7.8 to fix CVE-2026-28950, a bug in the Notification Services component that kept notifications marked for deletion stored on the device. The release came days after 404 Media published a report documenting how the FBI had extracted Signal messages from the internal notification database of an iPhone — including messages from an app the user had since deleted.

Docker Desktop 4.70.0: Mac crash loop fixed, automatic rollback added

Sun, 26 Apr 2026 11:00:00 +0200

Docker Desktop 4.70.0, released April 20, 2026, resolves two Mac-specific issues that could leave the application unusable after an update. The official release notes also list component upgrades across the stack.

iOS 18.7.7 patches DarkSword: six vulnerabilities across WebKit and the kernel

Sun, 26 Apr 2026 10:00:00 +0200

On March 24, 2026, Apple released iOS 18.7.7 and iPadOS 18.7.7 for a limited set of devices — iPhone XS, XS Max, XR, and the 7th-generation iPad. On April 1, it extended availability to all supported models, from iPhone 11 through iPhone 16. The reason is DarkSword, a full-chain exploit kit that strings together six vulnerabilities to compromise an iPhone from a single web page visit.

App Store: iOS 26 SDK and Xcode 26 required from April 28

Sun, 26 Apr 2026 09:00:00 +0200

Starting Monday April 28, any new build or update submitted to App Store Connect must be compiled with Xcode 26 and the SDK matching the target platform: iOS 26, iPadOS 26, tvOS 26, visionOS 26, or watchOS 26. Apple published the requirement on developer.apple.com in February 2026. The deadline is two days away.

Privacy Policy

Mon, 01 Jan 0001 00:00:00 +0000

Data Controller

Luca
Email: mail@bitten.news

Data Collected and Purposes

This site is hosted on servers located in Italy. Computer systems automatically acquire certain technical data necessary for the site to function (IP address, browser type, pages visited, time of request). This data is retained only for the time strictly necessary to ensure security and correct operation of the service.

bitten

Apple takes the App Store Epic contempt ruling to the Supreme Court over external payment links

Docker Model Runner: CVE-2026-33990 is a critical SSRF in the OCI registry token exchange

macOS 27 will be the last Apple system to support Rosetta

WWDC26: developer sessions schedule, Group Labs with Apple engineers, 350 Swift Student Challenge winners

App Store price update May 2026: South Korea and Latvia changes

App Store Brazil betting license requirement: what developers need to submit

Safari 26.5 WebKit CSS features: :open, random() changes, Origin API, and 63 bug fixes

Docker Desktop 4.74.0: security update, Gordon AI goes GA, Mac fixes

WWDC26 in 27 days: what to prepare before the June 8 keynote

Docker Desktop 4.72.0 and 4.73.0: kernel CVE in containers and memory fix for Apple Silicon

iOS 26.5 and macOS Tahoe 26.5: public release with 90+ CVEs patched

iOS 18.7.9 and macOS Sequoia 15.7.7: 50+ CVEs for devices that can't run iOS 26

VS Code 1.118: remote Copilot control, semantic indexing everywhere, and Anthropic caching

iOS 26.5: RCS Universal Profile 3.0 brings E2E encryption between iPhone and Android

iOS 26.5 RC and Xcode 26.5 RC: all release candidates land on May 4

Docker Desktop 4.71.0: Docker Model Runner Now Disabled by Default

Apple Maps Ads Are Coming This Summer in the US and Canada

iOS 26.5 Beta 4: Proximity Pairing and Live Activities for Third-Party Wearables in the EU

App Store Connect Analytics: 100 new metrics and the end of Sales and Trends

App Store: monthly subscriptions with a 12-month commitment

Safari Technology Preview 242: CSS attr() Level 5, IndexedDB getAllRecords(), and closedby on dialog

Swift extension lands on Cursor and VSCodium via Open VSX

iOS 26.4.2 and iOS 18.7.8: the bug that retained deleted notifications

Docker Desktop 4.70.0: Mac crash loop fixed, automatic rollback added

iOS 18.7.7 patches DarkSword: six vulnerabilities across WebKit and the kernel

App Store: iOS 26 SDK and Xcode 26 required from April 28

Privacy Policy

Data Controller

Data Collected and Purposes

Navigation Data