Support for InstallMacOSMinimumVersion key to suppress workflows for machines above a minimum specified version of macOS

[jacobwestbrook-synth]

In many managed environments, organisations define a minimum required macOS version (e.g., 15.3). Devices already at or above that version are considered compliant and do not need to be prompted to update. However, they should still retain the option to self-initiate updates or upgrades through other tools like Jamf Self Service.

Currently, even when scoped using Smart Groups and configured to suppress restarts, Super will:

• Run its workflow on all targeted systems at least once
• Detect that updates (especially minor ones) are available
• Display user-facing dialogs and prompt for action

This results in unnecessary interruptions for users who are already compliant with the organisation’s OS policy.

Proposal: Add support for a configuration key (e.g. InstallMacOSMinimumVersion) that could be used to detect and suppress all user-facing workflows in Super if the Mac is already running the specified minimum OS version or higher.

InstallMacOSMinimumVersion
15.3

When this key is present:

• Super should evaluate the current OS version before beginning any workflow
• If the current version is equal to or greater than the specified minimum, Super should gracefully exit without initiating any dialogs or update workflows
• If the system is below the specified version, Super would behave as normal

Benefits

• Avoids redundant prompts for compliant devices
• Reduces reliance on Smart Group scoping, wrapper scripts, or external launch logic to suppress Super
• Cleanly separates enforcement from optional self-service paths

Supports hybrid environments where Super is used for enforcement and MDM or Self Service handles voluntary updates

Current Workarounds

• Scoping Super only to devices below the minimum version using Smart Groups (ineffective when configs are updated or re-pushed)
• Using wrapper scripts to check the OS version before launching Super (adds complexity and deployment overhead)