Could you add a note about that in the docs? Also, given that this endpoint wont return consumables, and Apple hasn't published the JWKs that the JWS's returned by StoreKit2 are signed with, how can we possibly validate consumables purchases on the server? I know how to validate on the client, but we need to validate in a trusted environment, AKA our servers.

Yes, that's the plan. I was hoping this was just a bug that Apple would quickly revert but seems like that isn't the case.

Thank you! Should have done that myself.

I haven't heard a thing. Their docs indicated and continue to indicate that homebrew is available in their environment so I suspect they'll fix this eventually. But, Apple isn't really a B2B company with attendant SLAs and quick incident response to these kinds of issues so no idea when to expect a fix.