codemagic-ci-cd · priitlatt · Jun 10, 2026 · Jun 10, 2026 · Jun 10, 2026 · Jun 10, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,13 @@
+Version 0.68.0
+-------------
+
+**Features**
+- Restore support for certificate type `DEVELOPER_ID_APPLICATION_G2` in `codemagic.apple.resources.CertificateType`. Apple [documents it as a valid certificate type](https://developer.apple.com/documentation/appstoreconnectapi/certificatetype) again after it had been temporarily deprecated in [version 0.59.0](https://github.com/codemagic-ci-cd/cli-tools/releases/tag/v0.59.0). This re-enables `app-store-connect certificates create` and `app-store-connect certificates list` invoked with `--type=DEVELOPER_ID_APPLICATION_G2`, as well as macOS direct distribution signing flows invoked with `--profile-type=MAC_APP_DIRECT` or `--profile-type=MAC_CATALYST_APP_DIRECT`.
+
+**Docs**
+- Update docs for `app-store-connect certificates create`.
+- Update docs for `app-store-connect certificates list`.
+
 Version 0.67.0
 -------------
 

diff --git a/docs/app-store-connect/certificates/create.md b/docs/app-store-connect/certificates/create.md
@@ -26,7 +26,7 @@ app-store-connect certificates create [-h] [--log-stream STREAM] [--no-color] [-
 ```
 ### Optional arguments for action `create`
 
-##### `--type=DEVELOPER_ID_APPLICATION | DEVELOPER_ID_KEXT | DEVELOPMENT | DISTRIBUTION | IOS_DEVELOPMENT | IOS_DISTRIBUTION | MAC_APP_DEVELOPMENT | MAC_APP_DISTRIBUTION | MAC_INSTALLER_DISTRIBUTION`
+##### `--type=DEVELOPER_ID_APPLICATION | DEVELOPER_ID_APPLICATION_G2 | DEVELOPER_ID_KEXT | DEVELOPMENT | DISTRIBUTION | IOS_DEVELOPMENT | IOS_DISTRIBUTION | MAC_APP_DEVELOPMENT | MAC_APP_DISTRIBUTION | MAC_INSTALLER_DISTRIBUTION`
 
 
 Type of the certificate. Default:&nbsp;`IOS_DEVELOPMENT`

diff --git a/docs/app-store-connect/certificates/list.md b/docs/app-store-connect/certificates/list.md
@@ -27,7 +27,7 @@ app-store-connect certificates list [-h] [--log-stream STREAM] [--no-color] [--v
 ```
 ### Optional arguments for action `list`
 
-##### `--type=DEVELOPER_ID_APPLICATION | DEVELOPER_ID_KEXT | DEVELOPMENT | DISTRIBUTION | IOS_DEVELOPMENT | IOS_DISTRIBUTION | MAC_APP_DEVELOPMENT | MAC_APP_DISTRIBUTION | MAC_INSTALLER_DISTRIBUTION`
+##### `--type=DEVELOPER_ID_APPLICATION | DEVELOPER_ID_APPLICATION_G2 | DEVELOPER_ID_KEXT | DEVELOPMENT | DISTRIBUTION | IOS_DEVELOPMENT | IOS_DISTRIBUTION | MAC_APP_DEVELOPMENT | MAC_APP_DISTRIBUTION | MAC_INSTALLER_DISTRIBUTION`
 
 
 Type of the certificate. Multiple arguments

diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "codemagic-cli-tools"
-version = "0.67.0"
+version = "0.68.0"
 description = "CLI tools used in Codemagic builds"
 authors = [{ name = "Priit Lätt", email = "priit@nevercode.io" }]
 requires-python = ">=3.8,<4"

diff --git a/src/codemagic/__version__.py b/src/codemagic/__version__.py
@@ -1,5 +1,5 @@
 __title__ = "codemagic-cli-tools"
 __description__ = "CLI tools used in Codemagic builds"
-__version__ = "0.67.0.dev"
+__version__ = "0.68.0.dev"
 __url__ = "https://github.com/codemagic-ci-cd/cli-tools"
 __licence__ = "GNU General Public License v3.0"
diff --git a/src/codemagic/apple/resources/enums.py b/src/codemagic/apple/resources/enums.py
@@ -194,6 +194,7 @@ class CertificateType(ResourceEnum):
     """
 
     DEVELOPER_ID_APPLICATION = "DEVELOPER_ID_APPLICATION"
+    DEVELOPER_ID_APPLICATION_G2 = "DEVELOPER_ID_APPLICATION_G2"
     DEVELOPER_ID_KEXT = "DEVELOPER_ID_KEXT"
     DEVELOPMENT = "DEVELOPMENT"
     DISTRIBUTION = "DISTRIBUTION"
@@ -267,6 +268,13 @@ def resolve_applicable_types(
             elif profile_type is ProfileType.MAC_APP_STORE:
                 types.append(CertificateType.MAC_APP_DISTRIBUTION)
 
+            # macOS direct distribution profiles primarily map to "DEVELOPER_ID_APPLICATION" (see
+            # `from_profile_type` above), but they can equally be signed with its newer "G2" generation.
+            # The provisioning profile keeps the same type regardless of which certificate generation it
+            # was created with.
+            if profile_type in (ProfileType.MAC_APP_DIRECT, ProfileType.MAC_CATALYST_APP_DIRECT):
+                types.append(CertificateType.DEVELOPER_ID_APPLICATION_G2)
+
         # Remove duplicate entries from the list in order-preserving way.
         return list(OrderedDict.fromkeys(types))
 

diff --git a/tests/apple/resources/enums/test_certificate_type.py b/tests/apple/resources/enums/test_certificate_type.py
@@ -114,11 +114,11 @@ def test_resolve_applicable_types_using_profile_type_with_one_match(
         ),
         (
             ProfileType.MAC_APP_DIRECT,
-            [CertificateType.DEVELOPER_ID_APPLICATION],
+            [CertificateType.DEVELOPER_ID_APPLICATION, CertificateType.DEVELOPER_ID_APPLICATION_G2],
         ),
         (
             ProfileType.MAC_CATALYST_APP_DIRECT,
-            [CertificateType.DEVELOPER_ID_APPLICATION],
+            [CertificateType.DEVELOPER_ID_APPLICATION, CertificateType.DEVELOPER_ID_APPLICATION_G2],
         ),
         (
             ProfileType.MAC_APP_STORE,
@@ -148,10 +148,12 @@ def test_resolve_applicable_types_with_multiple_arguments():
         profile_type=ProfileType.IOS_APP_STORE,
         certificate_types=[
             CertificateType.DEVELOPER_ID_APPLICATION,
+            CertificateType.DEVELOPER_ID_APPLICATION_G2,
         ],
     )
     expected_certificate_types = [
         CertificateType.DEVELOPER_ID_APPLICATION,  # From "certificate_types" argument
+        CertificateType.DEVELOPER_ID_APPLICATION_G2,  # From "certificate_types" argument
         CertificateType.DISTRIBUTION,  # From given profile type
         CertificateType.IOS_DISTRIBUTION,  # From given profile type
     ]