Were you fully able to resolve this? I am seeing the same error when uploading my macOS app to the App Store.
I'm using the iOS-style App Group ID and I can certainly resolve the issue by prefixing the App Group with my Team ID. However, this is problematic because users with existing installations of my macOS app will have their data in the Group Container folder that uses the iOS-style App Group ID.
I'm using the Xcode managed Profile for the provisioning profile and I've inspected it and it does appear that the com.apple.security.application-groups key with value group.com.XXXX exists in there. I'm not sure what else I'm missing here or if iOS-style App Group IDs just no longer works?
Topic:
Code Signing
SubTopic:
Entitlements
Tags: