Merge branch 'master' into feature/async-provider

Author: guidedways

.github/actions/setup/action.yml

@@ -2,6 +2,10 @@ name: Set up environment
 description: Set up the environment for building and testing the library on a given platform
 
 inputs:
+  ruby:
+    description: The version of Ruby to use
+    required: true
+
   xcode:
     description: The version of Xcode to use
     required: true
@@ -10,16 +14,16 @@ runs:
   using: composite
 
   steps:
-
     - name: Set up Ruby
-      uses: ruby/setup-ruby@52753b7da854d5c07df37391a986c76ab4615999 # pinned to version v1.191.0
+      uses: ruby/setup-ruby@6ca151fd1bfcfd6fe0c4eb6837eb0584d0134a0c # pin@v1.290.0
       with:
-        ruby-version: '3.1.0'
+        ruby-version: ${{ inputs.ruby }}
         bundler-cache: true
         cache-version: 1
 
     - name: Setup Xcode
-      uses: mxcl/xcodebuild@6e60022a0cbe8c89278be2dd1773a2f68e7c5c87
+      uses: mxcl/xcodebuild@d3ee9b419c1be9a988086c58fe0988f32d99cfc5 # pin@v3.6.0
       with:
         xcode: ${{ inputs.xcode }}
         action: none
+        verbosity: xcbeautify

.github/actions/test/action.yml

@@ -5,9 +5,11 @@ inputs:
   xcode:
     description: The version of Xcode to use
     required: true
+
   scheme:
     description: The Xcode scheme to use
     required: true
+
   platform:
     description: The platform to build for
     required: true
@@ -16,18 +18,15 @@ runs:
   using: composite
 
   steps:
-    - name: Install xcpretty
-      run: gem install xcpretty
-      shell: bash
-
     - name: Save Xcode version
       run: xcodebuild -version | tee .xcode-version
       shell: bash
 
     - name: Run tests
-      uses: mxcl/xcodebuild@6e60022a0cbe8c89278be2dd1773a2f68e7c5c87
+      uses: mxcl/xcodebuild@d3ee9b419c1be9a988086c58fe0988f32d99cfc5 # pin@v3.6.0
       with:
         xcode: ${{ inputs.xcode }}
         scheme: ${{ inputs.scheme }}
         platform: ${{ inputs.platform }}
         code-coverage: true
+        verbosity: xcbeautify

.github/dependabot.yml

@@ -8,8 +8,26 @@ updates:
     ignore:
       - dependency-name: '*'
         update-types: [version-update:semver-major]
+    labels:
+      - dependencies
 
   - package-ecosystem: github-actions
     directory: /
     schedule:
       interval: daily
+    labels:
+      - dependencies
+
+  - package-ecosystem: github-actions
+    directory: /.github/actions/setup
+    schedule:
+      interval: daily
+    labels:
+      - dependencies
+
+  - package-ecosystem: github-actions
+    directory: /.github/actions/test
+    schedule:
+      interval: daily
+    labels:
+      - dependencies

.github/workflows/main.yml

@@ -12,6 +12,9 @@ concurrency:
     group: ${{ github.workflow }}-${{ github.ref }}
     cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
 
+env:
+    ruby: '3.3.1'
+
 jobs:
     authorize:
       name: Authorize
@@ -24,7 +27,7 @@ jobs:
         needs: authorize # Require approval before running on forked pull requests
         name: Test on ${{ matrix.platform.os }} using Xcode ${{ matrix.xcode }}
         environment: ${{ github.event.pull_request.head.repo.fork && 'external' || 'internal' }}
-        runs-on: macos-13
+        runs-on: macos-14
 
         env:
             xcodeproj: SimpleKeychain.xcodeproj
@@ -36,15 +39,16 @@ jobs:
               - { os: macOS, scheme: SimpleKeychain-macOS }
               - { os: tvOS, scheme: SimpleKeychain-tvOS }
             xcode: 
-              - '15.0.1'
+              - '16.1'
 
         steps:
             - name: Checkout
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+              uses: actions/checkout@v6
 
             - name: Set up environment
               uses: ./.github/actions/setup
               with:
+                ruby: ${{ env.ruby }}
                 xcode: ${{ matrix.xcode }}
 
             - name: Run tests
@@ -60,59 +64,64 @@ jobs:
 
             - name: Upload coverage report
               if: ${{ matrix.platform.os == 'iOS' }}
-              uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # pin@5.3.1
+              uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # pin@5.5.2
               with:
                 token: ${{ secrets.CODECOV_TOKEN }}
 
     test-package:
         name: Test Swift package using Xcode ${{ matrix.xcode }}
-        runs-on: macos-13
+        runs-on: macos-14
 
         strategy:
           matrix:
             xcode: 
-              - '15.0.1'
+              - '16.1'
 
         steps:
             - name: Checkout
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+              uses: actions/checkout@v6
 
             - name: Set up environment
               uses: ./.github/actions/setup
               with:
+                ruby: ${{ env.ruby }}
                 xcode: ${{ matrix.xcode }}
 
             - name: Run tests
               run: swift test
 
     pod-lint:
         name: Lint podspec using Xcode ${{ matrix.xcode }}
-        runs-on: macos-13-xlarge
+        runs-on: macos-14-xlarge
 
         strategy:
           matrix:
             xcode: 
-              - '15.2'
+              - '16.1'
 
         steps:
             - name: Checkout
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+              uses: actions/checkout@v6
 
             - name: Set up environment
               uses: ./.github/actions/setup
               with:
+                ruby: ${{ env.ruby }}
                 xcode: ${{ matrix.xcode }}
 
             - name: Run pod lib lint
               run: bundle exec pod lib lint --allow-warnings --fail-fast
 
     swiftlint:
         name: Lint code with SwiftLint
-        runs-on: macos-13
+        runs-on: macos-14
 
         steps:
             - name: Checkout
-              uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+              uses: actions/checkout@v6
+              
+            - name: Install SwiftLint
+              run: brew install swiftlint
 
             - name: Run SwiftLint
               run: swiftlint lint --reporter github-actions-logging

.github/workflows/sca_scan.yml

@@ -0,0 +1,13 @@
+name: SCA
+
+on:
+  push:
+    branches:
+    - "**"
+
+jobs:
+  snyk-cli:
+    uses: auth0/devsecops-tooling/.github/workflows/sca-scan.yml@main
+    with:
+      additional-arguments: "--exclude=README.md"
+    secrets: inherit

.github/workflows/semgrep.yml

@@ -1,5 +1,12 @@
 # Change Log
 
+## [1.3.0](https://github.com/auth0/SimpleKeychain/tree/1.3.0) (2025-03-14)
+[Full Changelog](https://github.com/auth0/SimpleKeychain/compare/1.2.0...1.3.0)
+
+**Added**
+- feat: add `errSecMissingEntitlement` error [\#224](https://github.com/auth0/SimpleKeychain/pull/224) ([grdsdev](https://github.com/grdsdev))
+- Add `Sendable` conformance [\#235](https://github.com/auth0/SimpleKeychain/pull/235) ([Widcket](https://github.com/Widcket))
+
 ## [1.2.0](https://github.com/auth0/SimpleKeychain/tree/1.2.0) (2024-09-16)
 [Full Changelog](https://github.com/auth0/SimpleKeychain/compare/1.1.0...1.2.0)