fix(ci): build on Xcode 27 SDK; baseline Sparkle public-key finding #2

Open

forge-recovery wants to merge 2 commits from ci/xcode27-native-fix into main

pull from: ci/xcode27-native-fix

merge into: KofTwentyTwo:main

KofTwentyTwo:main

KofTwentyTwo:docs/fork-notice

KofTwentyTwo:fix/print-media-query-styles

KofTwentyTwo:feature/mac-printing

KofTwentyTwo:fix/toolbar-spacer

Conversation 0 Commits 2 Files Changed 2

+5 -3

forge-recovery commented 2026-11-01 19:57:00 +00:00

Owner

Copy link

Copy source

Found by the first live central native run (markdownViewr run 566, head 2bfdf91) on Grogu with Xcode 27.2.

• MarkdownDocument.swift: SwiftUI now exports its own Document protocol, so the bare name is ambiguous with swift-markdown's Document; qualify as Markdown.Document (3 sites). The run-566 += error was a consequence.
• .gitleaksignore: baseline the single historical finding b3940a36...:project.yml:generic-api-key:66 (Sparkle SUPublicEDKey, an EdDSA public verification key). Exact fingerprint only, no pattern.

Native run 606 on this branch: build compiles, secrets scan green. Tests still fail on the runner: markdownViewrTests is an app-hosted unit-test bundle and the Grogu runner (launchd daemon as _gitea_kof) has no GUI session ("test runner hung before establishing connection"). That is a runner prerequisite, not a source defect; not skipped or bypassed here.

Co-Authored-By: Claude Sonnet 5.5 noreply@anthropic.com

Found by the first live central native run (markdownViewr run 566, head 2bfdf91) on Grogu with Xcode 27.2. - `MarkdownDocument.swift`: SwiftUI now exports its own `Document` protocol, so the bare name is ambiguous with swift-markdown's `Document`; qualify as `Markdown.Document` (3 sites). The run-566 `+=` error was a consequence. - `.gitleaksignore`: baseline the single historical finding `b3940a36...:project.yml:generic-api-key:66` (Sparkle `SUPublicEDKey`, an EdDSA public verification key). Exact fingerprint only, no pattern. Native run 606 on this branch: build compiles, secrets scan green. Tests still fail on the runner: `markdownViewrTests` is an app-hosted unit-test bundle and the Grogu runner (launchd daemon as `_gitea_kof`) has no GUI session ("test runner hung before establishing connection"). That is a runner prerequisite, not a source defect; not skipped or bypassed here. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

forge-recovery added 2 commits 2026-11-01 19:57:01 +00:00

fix(ci): build on Xcode 27 SDK and allowlist Sparkle public key ... 736e6f3b6e

- Qualify swift-markdown's Document: SwiftUI now exports its own Document protocol, making the bare name ambiguous.
- Allowlist the Sparkle SUPublicEDKey (an EdDSA public verification key, not a secret) for gitleaks.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

fix(ci): baseline exact Sparkle public-key fingerprint instead of a pattern allowlist ... 791e487737

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

All checks were successful

Hide all checks

KofTwentyTwo/ci-policy: ci / fork-guard (pull_request) Skipped

Details

KofTwentyTwo/ci-policy: ci / gradle-0 (pull_request) Skipped

Details

KofTwentyTwo/ci-policy: ci / gradle-1 (pull_request) Skipped

Details

KofTwentyTwo/ci-policy: ci / java-docker-2 (pull_request) Skipped

Details

KofTwentyTwo/ci-policy: ci / java-maven-3 (pull_request) Skipped

Details

KofTwentyTwo/ci-policy: ci / manifests-4 (pull_request) Skipped

Details

KofTwentyTwo/ci-policy: ci / node-5 (pull_request) Skipped

Details

KofTwentyTwo/ci-policy: ci / rust-6 (pull_request) Skipped

Details

KofTwentyTwo/ci-policy: ci / rust-7 (pull_request) Skipped

Details

KofTwentyTwo/ci-policy: ci / rust-8 (pull_request) Skipped

Details

KofTwentyTwo/ci-policy: ci / not-enrolled (pull_request) Skipped

Details

KofTwentyTwo/ci-policy: Shared source and config CI / verify (pull_request) Successful in 24s

Details

KofTwentyTwo/ci-policy: Shared source and config CI / secrets (pull_request) Successful in 40s

Details

KofTwentyTwo/ci-policy: Shared source and config CI / gate (pull_request) Successful in 20s

Details

KofTwentyTwo/ci-policy: ci / source-config-9 (pull_request) Successful in 1m8s

Details

KofTwentyTwo/ci-policy: ci / ci-result (pull_request) Successful in 11s

Details

You are not authorized to merge this pull request.

This pull request can be merged automatically.

This branch is out-of-date with the base branch

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin ci/xcode27-native-fix:ci/xcode27-native-fix

git checkout ci/xcode27-native-fix

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

bug

Something isn't working

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

question

Further information is requested

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: KofTwentyTwo/markdownViewr#2