AutoPkg 3.0 released

[Elliot Jordan]

After 3+ years (!) in the making, I'm very excited to announce that AutoPkg 3.0 is now available. Key features and changes include:

• Recipe map: AutoPkg now keeps an on-disk JSON cache of every recipe and override, allowing significant performance gains.
• New clear-cache verb for cleaning up your AutoPkg cache programmatically, either per-recipe or in bulk.
• Security hardening: Stricter CodeSignatureVerifier, path traversal prevention, and many other small steps towards secure default behaviors.
• URLDownloader less reliant on Mac-only extended attributes, gains some useful options, and less likely to cause needless re-downloads.
• Override trust information now covers package scripts.
• DmgCreator now defaults to APFS for created disk images, with lzfse compression (ULFO).
• Ships with Python 3.11.9, and a path towards including Python 3.12 in future AutoPkg version 3.1.

Many, many more details in the notes linked above. Huge thanks to all the contributors who helped steer this release!

Elliot