Skip to content

Bump github.com/sparkle-project/sparkle from 2.8.1 to 2.9.3 - #41

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/swift/github.com/sparkle-project/sparkle-2.9.3
Closed

Bump github.com/sparkle-project/sparkle from 2.8.1 to 2.9.3#41
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/swift/github.com/sparkle-project/sparkle-2.9.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 18, 2026

Copy link
Copy Markdown

Bumps github.com/sparkle-project/sparkle from 2.8.1 to 2.9.3.

Release notes

Sourced from github.com/sparkle-project/sparkle's releases.

2.9.3 Appcast Improvements

Changes:

  • Fix updating not working the first time if the app's bundle ID ends with ".app" (#2882) (Zorg)

This release contains a very specific installation fix for apps that use a bundle identifier ending with .app

Please also check 2.9.2, 2.9.1, and 2.9.0 for previous changes.

2.9.2 Appcast Improvements

Changes:

  • Show hidden window title in update window for accessibility (#2871) (Zorg)
  • Polish and update Spanish translations to be gender neutral (#2874, #2875) (Emilio P Egido)
  • Guard against NULL CFRelease() on failure condition in fallback path (#2867) (Zorg)
  • Guard against symlinks when applying delta update files (fe7b718) (Zorg, fg0x0)
  • Enforce connection to installer to be validated before receiving appcast item data (#2876, #2877) (Zorg, fg0x0)

This release contains two high-complex security fixes reported by @​fg0x0. The details will be posted in the 2.9 discussion.

Please also check 2.9.1 and 2.9.0 for previous changes.

2.9.1 Appcast Improvements

Changes:

  • Fix potential crash due to race condition within clearDownloadedUpdate (#2863) (Julian Pscheid)
  • Fix generate_appcast failing if feed URL doesn't have lastPathComponent (#2862) (Julian Pscheid)
  • Don't let progress status text title string line wrap (#2856) (Zorg)
  • Add minimal framework support for building arm64e (#2858, #2860) (Zorg)
  • Add SKIP_INSTALL=YES to for XPCServices targets (#2864) (Jeremy Huddleston Sequoia)

Please also check 2.9.0 for previous changes.

2.9.0 Appcast Improvements

Changes:

  • Add basic markdown support for release notes (requires macOS 12+) including customizing its presentation (#2810, #2817) (Zorg)
  • Add support for signing and verifying appcast feeds (#2822, #2828) (Zorg)
  • Add sparkle:hardwareRequirements for enforcing an Apple silicon (arm64) requirement (#2797) (Zorg)
  • Add sparkle:minimumUpdateVersion for specifying a minimum version an app needs to be on before upgrading (#2811) (Zorg)
  • Add API annotations for Swift concurrency (#2827) (Zorg)
  • Validate Obj-C class when reading objects from user defaults / Info plists (#2782) (Zorg)
  • Download temporary files in-memory using NSURLSessionDataTask (#2825) (Zorg)
  • Allow impatient update check interval to be configured for updates that are downloaded automatically (#2799) (Zorg)
  • Probe agent & status service as soon as we launch it to reduce timeout issues (#2852) (Zorg)
  • Add allowsAutomaticUpdates property to determine if automatic downloading/installing of updates option should be enabled (#2809) (Zorg)
  • Add Vietnamese translation (#2816, #2839) (TranPhuong319)
  • Add missing nn language to Installer progress Info.plist (#2818) (Zorg)
  • Improve German localization (#2847) (Marco Hillger)
  • Find non-canonical Sparkle.framework locations in generate_appcast when creating delta updates to determine compatibility (#2833) (Zorg)

... (truncated)

Commits
  • d46d456 Update Package management files for version 2.9.3
  • 00e7c24 Update CHANGELOG for version 2.9.3
  • e6a344a Fix updating not working the first time if bundle ID ends with ".app" (#2882)
  • 6276ba2 Update Package management files for version 2.9.2
  • 113279a Improve synchronization of _receivedAppcastItemData (#2877)
  • 7c4741d Update Package management files for version 2.9.2
  • 5df807d Update README for 2.9.2
  • c6ab245 Update Package management files for version 2.9.2
  • 6e370a5 Enforce connection to installer to be validated before receiving appcast item...
  • cbdc150 Polish Spanish localization in Sparkle.strings (#2875)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file swift_package_manager Pull requests that update swift_package_manager code labels Jun 18, 2026
Bumps [github.com/sparkle-project/sparkle](https://github.com/sparkle-project/Sparkle) from 2.8.1 to 2.9.3.
- [Release notes](https://github.com/sparkle-project/Sparkle/releases)
- [Commits](sparkle-project/Sparkle@2.8.1...2.9.3)

---
updated-dependencies:
- dependency-name: github.com/sparkle-project/sparkle
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/swift/github.com/sparkle-project/sparkle-2.9.3 branch from 76e9f7b to 69d6a25 Compare July 2, 2026 15:06
@dependabot @github

dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Author

Superseded by #45.

@dependabot dependabot Bot closed this Jul 9, 2026
@dependabot
dependabot Bot deleted the dependabot/swift/github.com/sparkle-project/sparkle-2.9.3 branch July 9, 2026 05:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file swift_package_manager Pull requests that update swift_package_manager code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants