From a64ef92af46fbf6559ed2e9ad59b100e51d940d7 Mon Sep 17 00:00:00 2001
From: Brandon <32753167+btoms20@users.noreply.github.com>
Date: Tue, 17 Feb 2026 20:29:07 -0800
Subject: [PATCH 1/5] Widen pin on swift-crypto dependency

---
 Package.swift | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Package.swift b/Package.swift
index 72fa38a..ccf08e5 100644
--- a/Package.swift
+++ b/Package.swift
@@ -16,7 +16,7 @@ let package = Package(
         .package(url: "https://github.com/vapor/async-kit.git", from: "1.20.0"),
         .package(url: "https://github.com/vapor/mysql-nio.git", from: "1.7.2"),
         .package(url: "https://github.com/vapor/sql-kit.git", from: "3.33.0"),
-        .package(url: "https://github.com/apple/swift-crypto.git", "2.0.0" ..< "4.0.0"),
+        .package(url: "https://github.com/apple/swift-crypto.git", "2.0.0" ..< "5.0.0"),
         .package(url: "https://github.com/apple/swift-nio.git", from: "2.82.0"),
         .package(url: "https://github.com/apple/swift-nio-ssl.git", from: "2.30.0"),
     ],

From 0258570c14b0055ad3ba563bac833ba0253e843c Mon Sep 17 00:00:00 2001
From: Gwynne Raskind <gwynne@vapor.codes>
Date: Tue, 17 Feb 2026 22:56:55 -0600
Subject: [PATCH 2/5] Update test.yml

---
 .github/workflows/test.yml | 25 +++++++++++++------------
 1 file changed, 13 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 85b3fd9..bad1910 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -5,6 +5,8 @@ concurrency:
 on:
   pull_request: { types: [opened, reopened, synchronize, ready_for_review] }
   push: { branches: [ main ] }
+permissions:
+  contents: read
 
 env:
   LOG_LEVEL: info
@@ -28,7 +30,7 @@ jobs:
     container: swift:noble
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with: { 'fetch-depth': 0 }
       - name: API breaking changes
         run: |
@@ -53,7 +55,7 @@ jobs:
           MYSQL_USER: test_username
           MYSQL_PASSWORD: test_password
           MYSQL_DATABASE: test_database
-    container: swift:6.1-noble
+    container: swift:6.2-noble
     strategy:
       fail-fast: false
       matrix:
@@ -64,10 +66,10 @@ jobs:
           - percona:8.0
     steps:
       - name: Check out package
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with: { path: 'mysql-kit' }
       - name: Check out dependent
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: vapor/fluent-mysql-driver
           path: fluent-mysql-driver
@@ -85,15 +87,14 @@ jobs:
         dbimage:
           - mysql:5.7
           - mysql:8.0
-          - mysql:9.3
+          - mysql:9.6
           - mariadb:10.4
           - mariadb:11
           - percona:8.0
         runner:
-          # List is deliberately incomplete; we want to avoid running 50 jobs on every commit
-          - swift:5.10-jammy
-          - swift:6.0-noble
+          - swift:6.0-jammy
           - swift:6.1-noble
+          - swift:6.2-noble
     container: ${{ matrix.runner }}
     runs-on: ubuntu-latest
     services:
@@ -106,7 +107,7 @@ jobs:
           MYSQL_DATABASE: test_database
     steps:
       - name: Check out package
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Run local tests with coverage and TSan
         run: swift test --enable-code-coverage --sanitize=thread
       - name: Submit coverage report to Codecov.io
@@ -121,10 +122,10 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - macos-version: macos-14
-            xcode-version: latest-stable
           - macos-version: macos-15
             xcode-version: latest-stable
+          - macos-version: macos-26
+            xcode-version: latest-stable
     runs-on: ${{ matrix.macos-version }}
     steps:
       - name: Select latest available Xcode
@@ -146,7 +147,7 @@ jobs:
               GRANT ALL PRIVILEGES ON test_database.* TO test_username@localhost;
           SQL
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Run tests with code coverage
         run: swift test --enable-code-coverage
         env: { MYSQL_HOSTNAME: '127.0.0.1' }

From 6bd91f9286ecf52cfe3c56ce17171a27ed602785 Mon Sep 17 00:00:00 2001
From: Gwynne Raskind <gwynne@vapor.codes>
Date: Tue, 17 Feb 2026 22:57:17 -0600
Subject: [PATCH 3/5] Update api-docs.yml

---
 .github/workflows/api-docs.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/api-docs.yml b/.github/workflows/api-docs.yml
index 491817d..387f178 100644
--- a/.github/workflows/api-docs.yml
+++ b/.github/workflows/api-docs.yml
@@ -3,6 +3,9 @@ on:
   push:
     branches:
       - main
+permissions:
+  contents: read
+  id-token: write
 
 jobs:
   build-and-deploy:

From 039b72593fe235847015fac4b5ca7e40f899ae04 Mon Sep 17 00:00:00 2001
From: Gwynne Raskind <gwynne@vapor.codes>
Date: Tue, 17 Feb 2026 23:04:07 -0600
Subject: [PATCH 4/5] Update test.yml

---
 .github/workflows/test.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index bad1910..3e5c320 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -106,6 +106,8 @@ jobs:
           MYSQL_PASSWORD: test_password
           MYSQL_DATABASE: test_database
     steps:
+      - name: Install curl
+        run: apt-get update && apt-get install -y curl
       - name: Check out package
         uses: actions/checkout@v6
       - name: Run local tests with coverage and TSan

From a54b8b7bfb82b5b488633c5521060a1d675662bb Mon Sep 17 00:00:00 2001
From: Gwynne Raskind <gwynne@vapor.codes>
Date: Tue, 17 Feb 2026 23:12:14 -0600
Subject: [PATCH 5/5] Update test.yml