[R-SIG-Mac] R 3.6.3 for MacOS

[Simon Urbanek]

Mojave doesn't require notarization (yet) so it is safe to use.

I have now updated the CRAN main page with both the notarized version and the regular one. Catalina users must use the notarized version, they have no choice, and now Apple enforces hardened runtime for notarized software. The notarized version has modified binaries for all its components (including R, tcl/tk and texinfo), so there are restrictions on what it can do. It may limit interoperability with other libraries and software that is not notarized*.
Please note that R 3.6.2 is the last version on Catalina that uses regular runtime, Apple has closed the door so no new releases can use regular runtime on Catalina.

Those on earlier versions of macOS are safe and can use the regular version. You can install the notarized version, but you don't have to.

Cheers,
Simon

* - so far Apple allows certain exceptions, but without them *all* R packages (containing binaries) will have to be signed and potentially notarized. The same applies to any libraries used as well, so that will severely limit the ability to create custom packages/libraries by the user. We may want to think about including code signing into the R package build process (and building R for that matter -- currently all signing is done post-hoc).


> On Mar 6, 2020, at 10:26 PM, peter dalgaard <pdalgd using gmail.com> wrote:
> 
> Installed without issues on Mojave.
> 
> Reminds me that I may need some instructions on any required changes in the toolchain for 4.0.0 if I want to upgrade the build machine to Catalina before the release.
> 
> -pd
> 
>> On 6 Mar 2020, at 02:32 , Simon Urbanek <simon.urbanek using r-project.org> wrote:
>> 
>> Lori,
>> 
>> as posted here earlier[1], Apple has tightened notarization requirements this year making it impossible for current R releases to be notarized until R 4.0.0 and thus the last Apple-notarized release is R 3.6.2.
>> 
>> If you are on a macOS version that doesn't require notarization, then I have put a binary that is not notarized in
>> https://mac.R-project.org/bin/macosx/el-capitan/base/R-3.6.3.nn.pkg
>> SHA1(R-3.6.3.nn.pkg)= c462c9b1f9b45d778f05b8d9aa25a9123b3557c4
>> 
>> I am currently investigating if we can enable the required restrictions on binaries and what implications for the functionality of R that will have and will keep you posted. 
>> 
>> Cheers,
>> Simon
>> 
>> 
>> [1] - https://stat.ethz.ch/pipermail/r-sig-mac/2019-October/013100.html
>> 
>> 
>>> On 6/03/2020, at 6:39 AM, Shepherd, Lori <Lori.Shepherd using RoswellPark.org> wrote:
>>> 
>>> Is there any update on when R 3.6.3 will be available for download from  https://cloud.r-project.org/bin/macosx/ ?
>>> It seems like there was a release of R 3.6.3 for linux and windows on February 29th that is available but nothing yet for Mac.
>>> 
>>> 
>>> 
>>> Lori Shepherd
>>> 
>>> Bioconductor Core Team
>>> 
>>> Roswell Park Comprehensive Cancer Center
>>> 
>>> Department of Biostatistics & Bioinformatics
>>> 
>>> Elm & Carlton Streets
>>> 
>>> Buffalo, New York 14263
>>> 
>>> 
>>> This email message may contain legally privileged and/or confidential information.  If you are not the intended recipient(s), or the employee or agent responsible for the delivery of this message to the intended recipient(s), you are hereby notified that any disclosure, copying, distribution, or use of this email message is prohibited.  If you have received this message in error, please notify the sender immediately by e-mail and delete this email message from your computer. Thank you.
>>> 	[[alternative HTML version deleted]]
>>> 
>>> _______________________________________________
>>> R-SIG-Mac mailing list
>>> R-SIG-Mac using r-project.org
>>> https://stat.ethz.ch/mailman/listinfo/r-sig-mac
>>> 
>> 
>> _______________________________________________
>> R-SIG-Mac mailing list
>> R-SIG-Mac using r-project.org
>> https://stat.ethz.ch/mailman/listinfo/r-sig-mac
> 
> -- 
> Peter Dalgaard, Professor,
> Center for Statistics, Copenhagen Business School
> Solbjerg Plads 3, 2000 Frederiksberg, Denmark
> Phone: (+45)38153501
> Office: A 4.23
> Email: pd.mes using cbs.dk  Priv: PDalgd using gmail.com
> 
> _______________________________________________
> R-SIG-Mac mailing list
> R-SIG-Mac using r-project.org
> https://stat.ethz.ch/mailman/listinfo/r-sig-mac