build(deps): bump the swift-app group across 1 directory with 2 updates

[dependabot]

Bumps the swift-app group with 2 updates in the / directory: github.com/sparkle-project/sparkle and github.com/migueldeicaza/swiftterm.

Updates github.com/sparkle-project/sparkle from 2.9.4 to 2.9.6

Release notes

Sourced from github.com/sparkle-project/sparkle's releases.

2.9.6 Appcast Improvements

Changes:

• Harden safety of installer moving the download archive (#2898) (Zorg, Joshua Rogers)
• Don't copy progress tool for root user (#2897) (Zorg, Joshua Rogers)
• Reject package based installs when signing validation failed (#2895) (Zorg)

This release contains a couple of security fixes reported by @​MegaManSec including a high-complex symlink security fix, and a privilege escalation fix affecting processes running as root using Sparkle (like running sparkle-cli as root). Details are updated in sparkle-project/Sparkle#2838.

Please also check 2.9.5, 2.9.4, 2.9.3, 2.9.2, 2.9.1, and 2.9.0 for previous changes.

2.9.5 Appcast Improvements

Changes:

• Harden patching delta file against symbolic link at destination path (#2891) (Zorg, Arpit Jain)

This release contains a high-complex symlink security fix reported by @​ararpitjain099 (this is a more complete fix to an issue identified in 2.9.2). Details are updated in sparkle-project/Sparkle#2838.

Please also check 2.9.4, 2.9.3, 2.9.2, 2.9.1, and 2.9.0 for previous changes.

Changelog

Sourced from github.com/sparkle-project/sparkle's changelog.

2.9.6

• Harden safety of installer moving the download archive (#2898) (Zorg, Joshua Rogers)
• Don't copy progress tool for root user (#2897) (Zorg, Joshua Rogers)
• Reject package based installs when signing validation failed (#2895) (Zorg)

2.9.5

• Harden patching delta file against symbolic link at destination path (#2891) (Zorg, Arpit Jain)

Commits

• ac2def2 Update Package management files for version 2.9.6
• de8eb17 Update CHANGELOG for 2.9.6
• f6bc73a Harden safety of installer moving the download archive
• 51245ef Reject package based installs when signing validation failed (#2895)
• c34faae Don't copy progress tool for root user (#2897)
• 79bc9e8 Update Package management files for version 2.9.5
• be4882f Update CHANGELOG for 2.9.5
• 77669ea Harden patching delta file against symbolic link at destination path (#2891)
• See full diff in compare view

Updates github.com/migueldeicaza/swiftterm from 1.13.0 to 1.18.0

Release notes

Sourced from github.com/migueldeicaza/swiftterm's releases.

Small improvements by the community worth distributing before the IO changes.

What's Changed

• Fix dropped child-exit event for fast-exiting processes on macOS by @​garrettsammons in migueldeicaza/SwiftTerm#617
• Fix combining glyphs after cursor movement, issue #625
• Make SelectionService and TerminalView.selection public by @​GiacoW in migueldeicaza/SwiftTerm#626

New Contributors

• @​garrettsammons made their first contribution in migueldeicaza/SwiftTerm#617
• @​GiacoW made their first contribution in migueldeicaza/SwiftTerm#626

Full Changelog: migueldeicaza/SwiftTerm@v1.17.0...v1.18.0

v1.17.0: OSC133 + fixes before the big IO layer changes.

What's Changed

• Notify the view when a full reset replaces the buffer (blank terminal after RIS) by @​OwnDing in migueldeicaza/SwiftTerm#622

• OSC133 support by @​migueldeicaza in migueldeicaza/SwiftTerm#602

• Draw reverse video by swapping the default colors, opaquely by @​hassekf in migueldeicaza/SwiftTerm#623

New Contributors

• @​OwnDing made their first contribution in migueldeicaza/SwiftTerm#622
• @​hassekf made their first contribution in migueldeicaza/SwiftTerm#623

Full Changelog: migueldeicaza/SwiftTerm@v1.16.0...v1.17.0

v1.16.0

Improvements

naifalziadna contributed BiDi support for SwiftTerm which improves arabic/hebrew and support the new extension for terminals which brings a much more pleasant environment for folks that are mixing content in languages. I built on his contribution to complete the support, but also to ensure that we did not regress in performance - and while doing so, improved the baseline performance over v1.15.0 and included new tests suites that we can use moving forward to ensure we keep our speed in check.

Fixes and improvements:

• CircularList: replace abort()/force-unwraps with precondition checks by @​klc in migueldeicaza/SwiftTerm#609

• Avoid force-casting CTRun font/color attributes by @​klc in migueldeicaza/SwiftTerm#610

• decode Kitty placeholder IDs in RGB order by @​sirfergy in migueldeicaza/SwiftTerm#607

• Let SwiftTerm cross-compile from macOS to Linux by @​ASNNetworks in migueldeicaza/SwiftTerm#612

• Render Powerline separators as cell-aligned geometry by @​futantan in migueldeicaza/SwiftTerm#605

• Fix cross-terminal hyperlink GC and make TinyAtom thread-safe by @​klc in migueldeicaza/SwiftTerm#611

• Fix catastrophic backtracking in implicit link detection by @​jizhi0v0 in migueldeicaza/SwiftTerm#613

• Translate selections when rows move in place by @​eyelock in migueldeicaza/SwiftTerm#616

... (truncated)

Commits

• See full diff in compare view