pulse-updates 1.0.12 → 1.0.14

package/ios/PulseUpdates/PulseController.swift

@@ -1630,8 +1630,14 @@ final class PulseRemoteLoader {
             case "\r": result += "\\r"
             case "\t": result += "\\t"
             default:
-                if char.asciiValue ?? 0 < 32 {
-                    result += String(format: "\\u%04x", char.asciiValue ?? 0)
+                // Only real control characters are \u-escaped. `asciiValue` is nil for every
+                // non-ASCII character, so `?? 0` collapsed each of them to 0 and rewrote it
+                // as \u0000: the canonical form no longer matched what the server signed and
+                // the manifest was refused ("Signature verification failed"). A single em
+                // dash in a release message was enough to block an app's updates entirely.
+                // Android's escapeJson never had this — it tests char.code < 32.
+                if let ascii = char.asciiValue, ascii < 32 {
+                    result += String(format: "\\u%04x", ascii)
                 } else {
                     result.append(char)
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pulse-updates",
-  "version": "1.0.12",
+  "version": "1.0.14",
   "description": "OTA updates for React Native - lightweight alternative to expo-updates",
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",