Release v1.0.2: Remove macOS extended attributes from release archives

- Added COPYFILE_DISABLE=1 to prevent macOS extended attributes in tar files
- Added cleanup steps to remove ._* and .DS_Store files before archiving
- Eliminates extraction warnings on Linux/Ubuntu systems
- Reduces archive sizes by removing unnecessary metadata
- Updated both manual release script and GitHub Actions workflow
- Updated script version numbers to 1.0.2

Author: wimdecorte

.github/workflows/release.yml

@@ -57,14 +57,19 @@ jobs:
           echo "# Log files will be created here during script execution" > "release-${{ matrix.platform.name }}/logs/.gitkeep"
           echo "# JAR backup files will be created here during script execution" > "release-${{ matrix.platform.name }}/backups/.gitkeep"
           
+          # Remove macOS extended attribute files if they exist
+          find "release-${{ matrix.platform.name }}" -name "._*" -delete 2>/dev/null || true
+          find "release-${{ matrix.platform.name }}" -name ".DS_Store" -delete 2>/dev/null || true
+          
           # Make main script executable
           chmod +x "release-${{ matrix.platform.name }}/${{ matrix.platform.script }}"
           
           # Create archive
           if [ "${{ matrix.platform.name }}" = "windows" ]; then
             cd "release-${{ matrix.platform.name }}" && zip -r "../${{ matrix.platform.archive_name }}.zip" .
           else
-            tar -czf "${{ matrix.platform.archive_name }}.tar.gz" -C "release-${{ matrix.platform.name }}" .
+            # Use COPYFILE_DISABLE to prevent macOS extended attributes in tar
+            COPYFILE_DISABLE=1 tar -czf "${{ matrix.platform.archive_name }}.tar.gz" -C "release-${{ matrix.platform.name }}" .
           fi
 
       - name: Calculate checksums

release/RELEASE_NOTES_v1.0.2.md

@@ -0,0 +1,77 @@
+# FileMaker Apache Commons JAR Replacer v1.0.2
+
+## Release Type: Patch Release
+
+## Summary
+This patch release eliminates macOS extended attributes and metadata files from release archives, preventing extraction warnings on Linux/Ubuntu systems.
+
+## Bug Fixes
+
+### 🐛 Removed macOS Extended Attributes from Release Archives
+- **Issue**: Linux/Ubuntu users saw numerous warnings when extracting tar.gz files: `tar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.provenance'`
+- **Root Cause**: macOS tar was including extended attributes (._* files) and metadata in archives
+- **Fix**: Added `COPYFILE_DISABLE=1` environment variable to tar commands and cleanup of macOS-specific files
+- **Impact**: Clean extraction on all platforms without warnings or unwanted metadata files
+
+## Technical Changes
+
+### Release Packaging Improvements
+- Added `COPYFILE_DISABLE=1` to all tar commands in both manual release script and GitHub Actions workflow
+- Added cleanup steps to remove `._*` files and `.DS_Store` files before archive creation
+- Reduced archive sizes by eliminating unnecessary macOS metadata
+- Improved cross-platform compatibility
+
+### Files Modified
+- `release/prepare-release.sh`: Added COPYFILE_DISABLE and cleanup steps
+- `.github/workflows/release.yml`: Added COPYFILE_DISABLE and cleanup steps for automated releases
+
+## User Experience Improvements
+- **Clean Extraction**: No more warning messages when extracting on Linux/Ubuntu
+- **Smaller Archives**: Reduced file sizes due to removal of unnecessary metadata
+- **Cross-Platform Consistency**: Archives behave identically across all platforms
+
+## Compatibility
+- **Backward Compatible**: Yes
+- **Breaking Changes**: None
+- **Platform Support**: macOS 10.14+, Ubuntu 18.04+, Windows 10+
+
+## Validation
+- ✅ Archives extract cleanly on Linux without warnings
+- ✅ No `._*` or `.DS_Store` files in release packages
+- ✅ All required scripts and modules present and functional
+- ✅ Reduced archive sizes confirm metadata removal
+
+## Downloads by Platform
+
+### macOS
+- **File**: `filemaker-jar-replacer-macos.tar.gz`
+- **Requirements**: macOS 10.14+, bash, administrator privileges
+- **Installation**: Extract and run `./replace-filemaker-jars-macos.sh`
+
+### Ubuntu/Linux  
+- **File**: `filemaker-jar-replacer-ubuntu.tar.gz`
+- **Requirements**: Ubuntu 18.04+, bash, curl, sudo access
+- **Installation**: Extract and run `./replace-filemaker-jars-ubuntu.sh`
+
+### Windows
+- **File**: `filemaker-jar-replacer-windows.zip`
+- **Requirements**: Windows 10+, PowerShell 5.1+, Administrator privileges
+- **Installation**: Extract and run `.\replace-filemaker-jars-windows.ps1`
+
+## Security
+- All downloads include SHA256 checksums for verification
+- No security-related changes in this patch release
+
+## Documentation
+- **CVE Details**: https://nvd.nist.gov/vuln/detail/CVE-2025-46295
+- **Claris Security Advisory**: https://support.claris.com/s/answerview?anum=000049055&language=en_US
+- **Manual JAR Replacement Guide**: https://support.claris.com/s/answerview?anum=000049059&language=en_US
+
+## Upgrade Instructions
+If you experienced extraction warnings with v1.0.1:
+1. Download the new v1.0.2 release for your platform
+2. Extract the archive - no warnings should appear
+3. Run the script normally
+
+## Next Steps
+This patch release provides a cleaner extraction experience across all platforms. The functionality remains identical to v1.0.1.

release/VERSION

@@ -1 +1 @@
-1.0.1
+1.0.2

release/prepare-release.sh

@@ -3,7 +3,7 @@
 
 set -e
 
-VERSION="1.0.1"
+VERSION="1.0.2"
 RELEASE_NAME="FileMaker Apache Commons JAR Replacer v${VERSION}"
 RELEASE_TAG="v${VERSION}"
 
@@ -97,9 +97,13 @@ mkdir -p "$TEMP_DIR/logs" "$TEMP_DIR/backups"
 echo "# Log files will be created here during script execution" > "$TEMP_DIR/logs/.gitkeep"
 echo "# JAR backup files will be created here during script execution" > "$TEMP_DIR/backups/.gitkeep"
 
+# Remove macOS extended attribute files if they exist
+find "$TEMP_DIR" -name "._*" -delete 2>/dev/null || true
+find "$TEMP_DIR" -name ".DS_Store" -delete 2>/dev/null || true
+
 chmod +x "$TEMP_DIR/replace-filemaker-jars-macos.sh"
 cd /tmp
-tar -czf "${ARCHIVE_NAME}.tar.gz" -C "release-macos" .
+COPYFILE_DISABLE=1 tar -czf "${ARCHIVE_NAME}.tar.gz" -C "release-macos" .
 sha256sum "${ARCHIVE_NAME}.tar.gz" > "${ARCHIVE_NAME}.tar.gz.sha256"
 echo "    ✅ Created ${ARCHIVE_NAME}.tar.gz"
 rm -rf "release-macos"
@@ -122,9 +126,13 @@ mkdir -p "$TEMP_DIR/logs" "$TEMP_DIR/backups"
 echo "# Log files will be created here during script execution" > "$TEMP_DIR/logs/.gitkeep"
 echo "# JAR backup files will be created here during script execution" > "$TEMP_DIR/backups/.gitkeep"
 
+# Remove macOS extended attribute files if they exist
+find "$TEMP_DIR" -name "._*" -delete 2>/dev/null || true
+find "$TEMP_DIR" -name ".DS_Store" -delete 2>/dev/null || true
+
 chmod +x "$TEMP_DIR/replace-filemaker-jars-ubuntu.sh"
 cd /tmp
-tar -czf "${ARCHIVE_NAME}.tar.gz" -C "release-ubuntu" .
+COPYFILE_DISABLE=1 tar -czf "${ARCHIVE_NAME}.tar.gz" -C "release-ubuntu" .
 sha256sum "${ARCHIVE_NAME}.tar.gz" > "${ARCHIVE_NAME}.tar.gz.sha256"
 echo "    ✅ Created ${ARCHIVE_NAME}.tar.gz"
 rm -rf "release-ubuntu"
@@ -147,6 +155,10 @@ mkdir -p "$TEMP_DIR/logs" "$TEMP_DIR/backups"
 echo "# Log files will be created here during script execution" > "$TEMP_DIR/logs/.gitkeep"
 echo "# JAR backup files will be created here during script execution" > "$TEMP_DIR/backups/.gitkeep"
 
+# Remove macOS extended attribute files if they exist
+find "$TEMP_DIR" -name "._*" -delete 2>/dev/null || true
+find "$TEMP_DIR" -name ".DS_Store" -delete 2>/dev/null || true
+
 cd /tmp
 cd "release-windows" && zip -r "../${ARCHIVE_NAME}.zip" . > /dev/null
 cd ..

replace-filemaker-jars-macos.sh

@@ -42,7 +42,7 @@
 #   Manual JAR Replacement Guide: https://support.claris.com/s/answerview?anum=000049059&language=en_US
 
 # Script configuration
-readonly SCRIPT_VERSION="1.0.1"
+readonly SCRIPT_VERSION="1.0.2"
 readonly COMMONS_TEXT_VERSION="1.11.0"
 readonly COMMONS_LANG_VERSION="3.18.0"
 readonly DEFAULT_JAR_BASE_URL="https://repo1.maven.org/maven2/org/apache/commons"

replace-filemaker-jars-ubuntu.sh

@@ -6,7 +6,7 @@
 set -euo pipefail
 
 # Script metadata
-readonly SCRIPT_VERSION="1.0.1"
+readonly SCRIPT_VERSION="1.0.2"
 readonly SCRIPT_NAME="FileMaker Apache Commons JAR Replacer (Ubuntu)"
 readonly CVE_ID="CVE-2025-46295"
 readonly COMMONS_TEXT_VERSION="1.11.0"

replace-filemaker-jars-windows.ps1

@@ -87,7 +87,7 @@ param(
 )
 
 # Script configuration
-$script:ScriptVersion = "1.0.1"
+$script:ScriptVersion = "1.0.2"
 $script:CommonsTextVersion = "1.11.0"
 $script:CommonsLangVersion = "3.18.0"
 $script:DefaultJarBaseUrl = "https://repo1.maven.org/maven2/org/apache/commons"