App Store Connect CLI 5.4.0 ships 68 changes for safer agent automation

App Store Connect CLI (rorkai, 7.3k GitHub stars) shipped version 5.4.0 with 68 changes in one release, themed around safer agent automation and fewer dead ends. Author @rudrank explained the key updates across multiple posts; the version is now officially released and is a worthwhile upgrade for teams driving App Store operations automation via CLI.

Confirmed

• Fail-closed review submissions: asc halts before applying changes when discovery, pagination, response structure, entry checks, or resource identity are uncertain.
• Apple API quirk handling: review submission creation may return a success-with-top-level-error response; 5.4.0 preserves the verified creation ID and follows each command's existing policy: keep, roll back, or emit a precise inspection hint.
• Safer IAP review screenshot replacement: checksums bind to the exact bytes uploaded; the replace flow avoids deleting good screenshots before new ones are ready; restore commands shell-escape provider-controlled values.
• Hardened web session storage: rejects symlinked, oversized, FIFO, and directory-like cache entries; writes land in a private exclusive file first; stale or unusable file sessions fall back automatically; attachment credentials are protected across redirects.
• TestFlight group assignment dry-run: asc builds add-groups supports --dry-run preflight that previews without applying changes.
• Build query fixes: no more replaying exhausted pages or retrying permanent app-level 404s; late pagination errors propagate instead of returning partial results; --since pagination is bounded so repeated cursors no longer loop forever.
• Recovery from bad input: mistyped or guessed subcommands get recovery paths, e.g. asc apps search points to asc apps list --name NAME or --bundle-id BUNDLEID; ambiguous lookups print a bounded candidate list agents can act on.
• Ratings and export details: rating retries keep the real storefront error when 429/5xx cannot finish before the deadline and cancel queued country tasks after the first deadline; exports validate version ownership first.

Why it matters

The release systematically tightens security boundaries (fail-closed, checksums, shell escaping, hardened session storage) and eliminates several infinite-loop and partial-result hazards, while dry-run and candidate suggestions give agents continuable paths instead of dead ends — directly targeting unattended automation and reducing risks of accidental live App Store changes, hangs, or credential leaks.

2026-09-19 ~ 2026-09-19 · 10 related posts

• [source] App Store Connect CLI 5.4.0 ships 68 changes aimed at safer agent automation — rudrank · 2026-09-19
• asc CLI 5.4.0 turns typos into useful command recovery paths — rudrank · 2026-09-19
• asc CLI adds no-mutation dry-run for TestFlight group assignment — rudrank · 2026-09-19
• [source] asc CLI 5.4.0 makes review submissions fail closed before mutations — rudrank · 2026-09-19
• ASC CLI handles Apple's odd API behavior: successful review-submission creates with top-level errors — rudrank · 2026-09-19
• ASC CLI fixes build lookups: no more replayed pages or infinite --since cursor loops — rudrank · 2026-09-19
• ASC CLI 5.4.0 hardens web session storage and fixes Apple cookie scope semantics — rudrank · 2026-09-19
• ASC CLI hardens IAP review screenshot replacement with byte-bound checksums — rudrank · 2026-09-19
• ASC CLI 5.4.0: ratings retries surface real storefront errors, exports verify app ownership — rudrank · 2026-09-19

1 near-duplicate retellings: rudrank