diff --git a/app/lib/jtouchbar-1.0.0.jar b/app/lib/jtouchbar-1.0.0.jar
index a6bf9a091a6..2c473bec881 100644
Binary files a/app/lib/jtouchbar-1.0.0.jar and b/app/lib/jtouchbar-1.0.0.jar differ
diff --git a/build/arduino-builder-macosx-1.5.0-signed.tar.bz2.sha b/build/arduino-builder-macosx-1.5.0-signed.tar.bz2.sha
new file mode 100644
index 00000000000..62d57ed50e7
--- /dev/null
+++ b/build/arduino-builder-macosx-1.5.0-signed.tar.bz2.sha
@@ -0,0 +1 @@
+8c8cda0f1b02e846f9724eb3e6cfd28864a47942
diff --git a/build/arduino-builder-macosx-1.5.0.tar.bz2.sha b/build/arduino-builder-macosx-1.5.0.tar.bz2.sha
deleted file mode 100644
index a201577c1cd..00000000000
--- a/build/arduino-builder-macosx-1.5.0.tar.bz2.sha
+++ /dev/null
@@ -1 +0,0 @@
-019d39b41471a863f50c5b5338d1d3b972aaaaf5
diff --git a/build/build.xml b/build/build.xml
index f04850428bc..f2e8f970d09 100644
--- a/build/build.xml
+++ b/build/build.xml
@@ -100,7 +100,7 @@
   <property name="portable" value="false" />
 
   <property name="ARDUINO-BUILDER-VERSION" value="1.5.0" />
-  <property name="LIBLISTSERIAL-VERSION" value="1.4.2" />
+  <property name="LIBLISTSERIAL-VERSION" value="1.4.2-2" />
   <property name="AVRGCC-VERSION" value="7.3.0-atmel3.6.1-arduino5" />
   <property name="AVRDUDE-VERSION" value="6.3.0-arduino17" />
   <property name="AVRCORE-VERSION" value="1.8.2" />
@@ -400,13 +400,13 @@
     <mkdir dir="${staging_folder}/work" />
 
     <antcall target="unzip">
-      <param name="archive_file" value="${staging_folder}/appbundler-1.0ea-arduino4.jar.zip" />
-      <param name="archive_url" value="https://downloads.arduino.cc/appbundler-1.0ea-arduino4.jar.zip" />
-      <param name="final_folder" value="${staging_folder}/appbundler-1.0ea-arduino4" />
-      <param name="dest_folder" value="${staging_folder}/appbundler-1.0ea-arduino4" />
+      <param name="archive_file" value="${staging_folder}/appbundler-1.0ea-arduino5.jar.zip" />
+      <param name="archive_url" value="https://downloads.arduino.cc/appbundler-1.0ea-arduino5.jar.zip" />
+      <param name="final_folder" value="${staging_folder}/appbundler-1.0ea-arduino5" />
+      <param name="dest_folder" value="${staging_folder}/appbundler-1.0ea-arduino5" />
     </antcall>
 
-    <taskdef name="bundleapp" classname="com.oracle.appbundler.AppBundlerTask" classpath="${staging_folder}/appbundler-1.0ea-arduino4/appbundler-1.0ea-arduino4.jar"/>
+    <taskdef name="bundleapp" classname="com.oracle.appbundler.AppBundlerTask" classpath="${staging_folder}/appbundler-1.0ea-arduino5/appbundler-1.0ea-arduino5.jar"/>
 
     <bundleapp
             jvmRequired="1.8"
@@ -484,8 +484,8 @@
     </antcall>
 
     <antcall target="unzip">
-      <param name="archive_file" value="./libastylej-2.05.1-4.zip" />
-      <param name="archive_url" value="https://downloads.arduino.cc/libastylej-2.05.1-4.zip" />
+      <param name="archive_file" value="./libastylej-2.05.1-5.zip" />
+      <param name="archive_url" value="https://downloads.arduino.cc/libastylej-2.05.1-5.zip" />
       <param name="final_folder" value="${staging_folder}/libastylej-2.05.1" />
       <param name="dest_folder" value="${staging_folder}" />
     </antcall>
@@ -503,6 +503,7 @@
     <copy file="macosx/liblistSerials-${LIBLISTSERIAL-VERSION}/osx/liblistSerialsj.dylib" todir="macosx/work/${staging_hardware_folder}/../lib/" />
     <chmod perm="755" file="macosx/work/${staging_hardware_folder}/../lib/liblistSerialsj.dylib" />
 
+    <property name="ARDUINO-BUILDER-EXTRA-VERSION" value="-signed" />
     <antcall target="build-arduino-builder" />
 
     <antcall target="portable-${portable}">
@@ -514,11 +515,11 @@
   <target name="macosx-build-avr-toolchain" unless="light_bundle">
     <antcall target="avr-toolchain-bundle">
       <param name="unpack_target" value="untar-native"/>
-      <param name="gcc_archive_file" value="avr-gcc-${AVRGCC-VERSION}-x86_64-apple-darwin14.tar.bz2"/>
+      <param name="gcc_archive_file" value="avr-gcc-${AVRGCC-VERSION}-x86_64-apple-darwin14-signed.tar.bz2"/>
       <param name="gcc_version" value="${AVRGCC-VERSION}"/>
-      <param name="avrdude_archive_file" value="avrdude-${AVRDUDE-VERSION}-x86_64-apple-darwin12.tar.bz2"/>
+      <param name="avrdude_archive_file" value="avrdude-${AVRDUDE-VERSION}-x86_64-apple-darwin12-signed.tar.bz2"/>
       <param name="avrdude_version" value="${AVRDUDE-VERSION}"/>
-      <param name="arduinoOTA_archive_file" value="arduinoOTA-${arduinoOTA-VERSION}-darwin_amd64.tar.bz2"/>
+      <param name="arduinoOTA_archive_file" value="arduinoOTA-${arduinoOTA-VERSION}-darwin_amd64-signed.tar.bz2"/>
       <param name="arduinoOTA_version" value="${arduinoOTA-VERSION}"/>
     </antcall>
 
@@ -556,7 +557,7 @@
 
     <!-- Sign app -->
     <exec executable="codesign" dir="macosx/work" failonerror="true">
-      <arg line="--keychain &quot;${macosx-sign-keychain}&quot; --force -s &quot;${macosx-sign-id}&quot; --deep -v Arduino.app/" />
+      <arg line="--keychain &quot;${macosx-sign-keychain}&quot; --force -s &quot;${macosx-sign-id}&quot; --timestamp --options runtime --deep -v Arduino.app/" />
     </exec>
 
     <!-- Check for successful signing -->
@@ -672,8 +673,8 @@
 
   <target name="linux-libastyle-x86" depends="linux-build" description="Download libastyle.so for x86/x64 arch">
     <antcall target="unzip">
-      <param name="archive_file" value="./libastylej-2.05.1-4.zip" />
-      <param name="archive_url" value="https://downloads.arduino.cc/libastylej-2.05.1-4.zip" />
+      <param name="archive_file" value="./libastylej-2.05.1-5.zip" />
+      <param name="archive_url" value="https://downloads.arduino.cc/libastylej-2.05.1-5.zip" />
       <param name="final_folder" value="${staging_folder}/libastylej-2.05.1" />
       <param name="dest_folder" value="${staging_folder}" />
     </antcall>
@@ -697,8 +698,8 @@
 
   <target name="linux-libastyle-arm" depends="linux-build" description="Download libastyle.so for ARM">
     <antcall target="unzip">
-      <param name="archive_file" value="./libastylej-2.05.1-4.zip" />
-      <param name="archive_url" value="https://downloads.arduino.cc/libastylej-2.05.1-4.zip" />
+      <param name="archive_file" value="./libastylej-2.05.1-5.zip" />
+      <param name="archive_url" value="https://downloads.arduino.cc/libastylej-2.05.1-5.zip" />
       <param name="final_folder" value="${staging_folder}/libastylej-2.05.1" />
       <param name="dest_folder" value="${staging_folder}" />
     </antcall>
@@ -740,8 +741,8 @@
 
   <target name="linux-libastyle-aarch64" depends="linux-build" description="Download libastyle.so for AArch64">
     <antcall target="unzip">
-      <param name="archive_file" value="./libastylej-2.05.1-4.zip" />
-      <param name="archive_url" value="https://downloads.arduino.cc/libastylej-2.05.1-4.zip" />
+      <param name="archive_file" value="./libastylej-2.05.1-5.zip" />
+      <param name="archive_url" value="https://downloads.arduino.cc/libastylej-2.05.1-5.zip" />
       <param name="final_folder" value="${staging_folder}/libastylej-2.05.1" />
       <param name="dest_folder" value="${staging_folder}" />
     </antcall>
@@ -853,11 +854,12 @@
   </target>
 
   <target name="build-arduino-builder" unless="no_arduino_builder">
+    <property name="ARDUINO-BUILDER-EXTRA-VERSION" value="" /> <!-- default if not set already -->
     <delete dir="${staging_folder}/arduino-builder-${platform}" includeemptydirs="true"/>
     <mkdir dir="${staging_folder}/arduino-builder-${platform}"/>
     <antcall target="untar-native">
-      <param name="archive_file" value="./arduino-builder-${platform}-${ARDUINO-BUILDER-VERSION}.tar.bz2" />
-      <param name="archive_url" value="https://downloads.arduino.cc/tools/arduino-builder-${platform}-${ARDUINO-BUILDER-VERSION}.tar.bz2" />
+      <param name="archive_file" value="./arduino-builder-${platform}-${ARDUINO-BUILDER-VERSION}${ARDUINO-BUILDER-EXTRA-VERSION}.tar.bz2" />
+      <param name="archive_url" value="https://downloads.arduino.cc/tools/arduino-builder-${platform}-${ARDUINO-BUILDER-VERSION}${ARDUINO-BUILDER-EXTRA-VERSION}.tar.bz2" />
       <param name="final_folder" value="${staging_folder}/arduino-builder-${platform}/arduino-builder" />
       <param name="dest_folder" value="${staging_folder}/arduino-builder-${platform}" />
     </antcall>
@@ -1059,8 +1061,8 @@
     <antcall target="windows-build-avr-toolchain" />
 
     <antcall target="unzip">
-      <param name="archive_file" value="./libastylej-2.05.1-4.zip" />
-      <param name="archive_url" value="https://downloads.arduino.cc/libastylej-2.05.1-4.zip" />
+      <param name="archive_file" value="./libastylej-2.05.1-5.zip" />
+      <param name="archive_url" value="https://downloads.arduino.cc/libastylej-2.05.1-5.zip" />
       <param name="final_folder" value="${staging_folder}/libastylej-2.05.1" />
       <param name="dest_folder" value="${staging_folder}" />
     </antcall>
diff --git a/build/libastylej-2.05.1-4.zip.sha b/build/libastylej-2.05.1-4.zip.sha
deleted file mode 100644
index eb54b5fa4bf..00000000000
--- a/build/libastylej-2.05.1-4.zip.sha
+++ /dev/null
@@ -1 +0,0 @@
-5ececb9bf18622f1ab61cd5cf9751ee0556a77e9
diff --git a/build/libastylej-2.05.1-5.zip.sha b/build/libastylej-2.05.1-5.zip.sha
new file mode 100644
index 00000000000..7ae7b7a6233
--- /dev/null
+++ b/build/libastylej-2.05.1-5.zip.sha
@@ -0,0 +1 @@
+06032c6429c8cdd74e5b94cceaa2785987e442e0
diff --git a/build/liblistSerials-1.4.0-2.zip.sha b/build/liblistSerials-1.4.0-2.zip.sha
deleted file mode 100644
index 60f1a128c16..00000000000
--- a/build/liblistSerials-1.4.0-2.zip.sha
+++ /dev/null
@@ -1 +0,0 @@
-79311e47bfc3bbde9cb907760008b5bc91414ba7
diff --git a/build/liblistSerials-1.4.2-2.zip.sha b/build/liblistSerials-1.4.2-2.zip.sha
new file mode 100644
index 00000000000..e72e9db9d02
--- /dev/null
+++ b/build/liblistSerials-1.4.2-2.zip.sha
@@ -0,0 +1 @@
+b6ddea08153ab811e90482007619d7997f48a02d
diff --git a/build/liblistSerials-1.4.2.zip.sha b/build/liblistSerials-1.4.2.zip.sha
deleted file mode 100644
index 2556f88c09c..00000000000
--- a/build/liblistSerials-1.4.2.zip.sha
+++ /dev/null
@@ -1 +0,0 @@
-5a81fcafc361fdf517cf811a982b1e4b35fa05eb
diff --git a/build/macosx/appbundler-1.0ea-arduino4.jar.zip.sha b/build/macosx/appbundler-1.0ea-arduino4.jar.zip.sha
deleted file mode 100644
index 15cbc3db398..00000000000
--- a/build/macosx/appbundler-1.0ea-arduino4.jar.zip.sha
+++ /dev/null
@@ -1 +0,0 @@
-89ef9e3ab1572e0bf2edfae2c9d6c0a03dcf2665
diff --git a/build/macosx/appbundler-1.0ea-arduino5.jar.zip.sha b/build/macosx/appbundler-1.0ea-arduino5.jar.zip.sha
new file mode 100644
index 00000000000..3dc241c5774
--- /dev/null
+++ b/build/macosx/appbundler-1.0ea-arduino5.jar.zip.sha
@@ -0,0 +1 @@
+d7734ca84b802d2b65137b9fc0ee01c5f2108ff0
diff --git a/build/macosx/arduinoOTA-1.2.1-darwin_amd64.tar.bz2.sha b/build/macosx/arduinoOTA-1.2.1-darwin_amd64.tar.bz2.sha
deleted file mode 100644
index fac2fccf1f5..00000000000
--- a/build/macosx/arduinoOTA-1.2.1-darwin_amd64.tar.bz2.sha
+++ /dev/null
@@ -1 +0,0 @@
-7f0554c09159cede9af5f338cc1041c88e571882
diff --git a/build/macosx/arduinoOTA-1.3.0-darwin_amd64-signed.tar.bz2.sha b/build/macosx/arduinoOTA-1.3.0-darwin_amd64-signed.tar.bz2.sha
new file mode 100644
index 00000000000..0aab0cb65a5
--- /dev/null
+++ b/build/macosx/arduinoOTA-1.3.0-darwin_amd64-signed.tar.bz2.sha
@@ -0,0 +1 @@
+648aa2df70113520a9d143a49e985552f3508023
diff --git a/build/macosx/arduinoOTA-1.3.0-darwin_amd64.tar.bz2.sha b/build/macosx/arduinoOTA-1.3.0-darwin_amd64.tar.bz2.sha
deleted file mode 100644
index ed003d82f4e..00000000000
--- a/build/macosx/arduinoOTA-1.3.0-darwin_amd64.tar.bz2.sha
+++ /dev/null
@@ -1 +0,0 @@
-2a2dd53e4d42256106157e0de9b0c72935c45c29
diff --git a/build/macosx/avr-gcc-7.3.0-atmel3.6.1-arduino5-x86_64-apple-darwin14-signed.tar.bz2.sha b/build/macosx/avr-gcc-7.3.0-atmel3.6.1-arduino5-x86_64-apple-darwin14-signed.tar.bz2.sha
new file mode 100644
index 00000000000..4388da488c9
--- /dev/null
+++ b/build/macosx/avr-gcc-7.3.0-atmel3.6.1-arduino5-x86_64-apple-darwin14-signed.tar.bz2.sha
@@ -0,0 +1 @@
+c641845446426e3fabf5d1b3f01ef7921ae227cf
diff --git a/build/macosx/avr-gcc-7.3.0-atmel3.6.1-arduino5-x86_64-apple-darwin14.tar.bz2.sha b/build/macosx/avr-gcc-7.3.0-atmel3.6.1-arduino5-x86_64-apple-darwin14.tar.bz2.sha
deleted file mode 100644
index ede9bf723a7..00000000000
--- a/build/macosx/avr-gcc-7.3.0-atmel3.6.1-arduino5-x86_64-apple-darwin14.tar.bz2.sha
+++ /dev/null
@@ -1 +0,0 @@
-40ced394dff8ec5381b7cf3708b2ab8dea54a1f6
diff --git a/build/macosx/avrdude-6.3.0-arduino17-x86_64-apple-darwin12-signed.tar.bz2.sha b/build/macosx/avrdude-6.3.0-arduino17-x86_64-apple-darwin12-signed.tar.bz2.sha
new file mode 100644
index 00000000000..2bcc96d202b
--- /dev/null
+++ b/build/macosx/avrdude-6.3.0-arduino17-x86_64-apple-darwin12-signed.tar.bz2.sha
@@ -0,0 +1 @@
+0694b2f647b9cf847e38dacd6b54c6a8591dc323
diff --git a/build/macosx/avrdude-6.3.0-arduino17-x86_64-apple-darwin12.tar.bz2.sha b/build/macosx/avrdude-6.3.0-arduino17-x86_64-apple-darwin12.tar.bz2.sha
deleted file mode 100644
index fac5ac8f193..00000000000
--- a/build/macosx/avrdude-6.3.0-arduino17-x86_64-apple-darwin12.tar.bz2.sha
+++ /dev/null
@@ -1 +0,0 @@
-dfb2a2a4d380c7fc0dc8e141555ae6c028786a8e
diff --git a/build/macosx/gcc.entitlements b/build/macosx/gcc.entitlements
new file mode 100644
index 00000000000..123d12a53e9
--- /dev/null
+++ b/build/macosx/gcc.entitlements
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>com.apple.security.cs.disable-library-validation</key>
+    <true/>
+</dict>
+</plist>
diff --git a/build/macosx/jre2.entitlements b/build/macosx/jre2.entitlements
new file mode 100644
index 00000000000..afa54db33b9
--- /dev/null
+++ b/build/macosx/jre2.entitlements
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+    <key>com.apple.security.cs.disable-executable-page-protection</key>
+    <true/>
+    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+    <true/>
+    <key>com.apple.security.cs.disable-library-validation</key>
+    <true/>
+</dict>
+</plist>