chore(deps): update dependency apple/swift-crypto to v4 by renovate[bot] · Pull Request #22 · bradwindy/nzimageapi-lambda

renovate · 2026-07-09T02:58:35Z

This PR contains the following updates:

Package	Update	Change
apple/swift-crypto	major	`from: "3.0.0"` → `from: "4.5.0"`

Release Notes

apple/swift-crypto (apple/swift-crypto)

`v4.5.0`

Compare Source

What's Changed

SemVer Minor

Add support for SHA-512/256 by @bauer-andreas in #432

SemVer Patch

Adopt FoundationEssentials instead of Foundation where available by @t089 in #317
Add module anchor to fix empty dynamic framework on Xcode 26 by @mrcararia in #436

New Contributors

@bauer-andreas made their first contribution in #432
@t089 made their first contribution in #317
@mrcararia made their first contribution in #436

Full Changelog: apple/swift-crypto@4.4.0...4.5.0

`v4.4.0`

Compare Source

What's Changed

SemVer Minor

Drop Swift 6.0 by @rnro in #434

Other Changes

Enable Swift 6.3 jobs in CI by @rnro in #433

Full Changelog: apple/swift-crypto@4.3.1...4.4.0

`v4.3.1`: Swift Crypto 4.3.1

Compare Source

Security Fixes

This version contains a fix for CVE-2026-28815: X-Wing HPKE Decapsulation Accepts Malformed Ciphertext Length. The X-Wing decapsulation path accepts attacker-controlled encapsulated ciphertext bytes without enforcing the required fixed ciphertext length. For more details see the advisory. We recommend updating to this release as soon as possible. (commit)

What's Changed

SemVer Patch

Add missing input validation in X-Wing HPKE decapsulation by @josephnoir in bb4ba81

Full Changelog: apple/swift-crypto@4.3.0...4.3.1

`v4.3.0`: Swift Crypto 4.3.0

Compare Source

What's Changed

SemVer Minor

Add support for encrypted PEM keys via BoringSSL by @fpseverino in #428

Other Changes

switch from main to 0.0.7 for swiftlang workflows by @rnro in #430
update actions/checkout from v4 to v6 by @rnro in #431

Full Changelog: apple/swift-crypto@4.2.0...4.3.0

`v4.2.0`

Compare Source

What's Changed

SemVer Minor

Add RSA PKCSv1.5 padding support for legacy compat by @mschrag in #425

Full Changelog: apple/swift-crypto@4.1.0...4.2.0

`v4.1.0`: Swift Crypto 4.1.0

Compare Source

What's Changed

SemVer Minor

Add PEM/DER APIs for Curve25519 by @ptoffy in #419

SemVer Patch

Incorrect maximum encryption size for RSA OAEP by @mschrag in #423

Other Changes

chore: restrict GitHub workflow permissions - future-proof by @incertum in #421

New Contributors

@incertum made their first contribution in #421
@mschrag made their first contribution in #423

Full Changelog: apple/swift-crypto@4.0.0...4.1.0

`v4.0.0`: Swift Crypto 4.0.0

Compare Source

What's Changed

SemVer Major

Update to WWDC25 release by @Lukasa and @simonjbeaumont in #359, #365, #367, #397, #403, #410, #401, and #415, #417
Replace all Foundation imports with FoundationEssentials by @Lukasa in #363
Adopt Swift 6 mode by @Lukasa in #368
Rename _CryptoExtras to CryptoExtras by @0xTim in #407
Update README for 4.0 release by @Lukasa in #418

Full Changelog: apple/swift-crypto@3.15.1...4.0.0

`v3.15.1`: Swift Crypto 3.15.1

Compare Source

What's Changed

SemVer Patch

Move away from Foundation.Thread by @Lukasa in #404
Update BoringSSL to 0226f30 by @gwynne in #406
Buildfix OpenBSD. by @3405691582 in #411
Remove useless try to fix warnings by @ptoffy in #412

Other Changes

Fix script path in PR template by @0xTim in #408
Make the tests Swift 6 ready. by @Lukasa in #409
Enable Swift 6.2 jobs in CI by @rnro in #414

Full Changelog: apple/swift-crypto@3.15.0...3.16.0

`v3.15.0`: Swift Crypto 3.15.0

Compare Source

What's Changed

SemVer Minor

Use Thread.threadDictionary instead of TaskLocal for thread-local by @simonjbeaumont in #395

SemVer Patch

Avoid TSAN issue in _CryptoExtras/AES/CMAC by @aryan-25 in #402

Other Changes

Improve vendor-boringssl.sh script to make it work better by @xtremekforever in #396
Use Swift SDKs to generate symbols for Linux targets and armv7 (using swift-sdk-generator) by @xtremekforever in #399

New Contributors

@xtremekforever made their first contribution in #396
@aryan-25 made their first contribution in #402

Full Changelog: apple/swift-crypto@3.14.0...3.15.0

`v3.14.0`: Swift Crypto 3.14.0

Compare Source

What's Changed

SemVer Minor

Add Sequence conformance to AES._CBC.IV (#389) by @wnagrodzki in #392
Add AES CMAC support by @Lukasa in #394

Other Changes

Enable release mode builds in CI by @josephnoir in #388

New Contributors

@wnagrodzki made their first contribution in #392

Full Changelog: apple/swift-crypto@3.13.3...3.14.0

`v3.13.3`: Swift Crypto 3.13.3

Compare Source

What's Changed

SemVer Patch

Cache curves to avoid repeatedly reallocating state by @Lukasa in #391

Other Changes

Add some benchmarks for EC key agreement by @Lukasa in #390

Full Changelog: apple/swift-crypto@3.13.2...3.13.3

`v3.13.2`: Swift Crypto 3.13.2

Compare Source

What's Changed

SemVer Patch

Work around Swift compiler issue with consuming and TSAN by @Lukasa in #384
Remove a few inlinability annotations by @glbrntt in #383

Full Changelog: apple/swift-crypto@3.13.1...3.13.2

`v3.13.1`: Swift Crypto 3.13.1

Compare Source

What's Changed

SemVer Patch

build: Make swift-crypto build on Windows by @Steelskin in #370

New Contributors

@Steelskin made their first contribution in #370

Full Changelog: apple/swift-crypto@3.13.0...3.13.1

`v3.13.0`: Swift Crypto 3.13.0

Compare Source

What's Changed

SemVer Minor

OpenBSD support. by @3405691582 in #349
Drop Swift 5.9 by @rnro in #353
Add a PKCS#8 DER property to private keys by @josephnoir in #372
Add API for ARC(P-256) and deprecate ARC(P-384) by @simonjbeaumont in #374
Typealias CryptoKitError by @0xTim in #285

SemVer Patch

perf: Add benchmarks and reduce allocations by ~50% for ARC and VOPRF by @simonjbeaumont in #346
Install swiftmodules with full module triple by @etcwilde in #354
Update BoringSSL to 035e720 by @Lukasa in #356
Make EllipticCurvePoint and ArbitraryPrecisionInteger Sendable by @Lukasa in #366
Remove security backend by @josephnoir in #373
CMake: Declare ASN1 dependency by @etcwilde in #376

Other Changes

Fix broken Windows tests by @Lukasa in #350
Enable Swift 6.1 jobs in CI by @rnro in #351
Fix typo in documentation for RSA private key constructors by @YourMJK in #362
Add static SDK CI workflow by @rnro in #340
Enable Windows CI on main by @Lukasa in #371
Mention Windows in README by @gjcairo in #378

New Contributors

@3405691582 made their first contribution in #349
@YourMJK made their first contribution in #362
@josephnoir made their first contribution in #372

Full Changelog: apple/swift-crypto@3.12.3...3.13.0

`v3.12.5`: Swift Crypto 3.12.5

Compare Source

What's Changed

SemVer Patch

CMake Build: Disable CMP0157 by @etcwilde in #387

Full Changelog: apple/swift-crypto@3.12.4...3.12.5

`v3.12.4`: Swift Crypto 3.12.4

Compare Source

What's Changed

SemVer Patch

Fix broken Windows tests (#350) by @Lukasa in #386
build: Make swift-crypto build on Windows by @etcwilde in #385

Full Changelog: apple/swift-crypto@3.12.3...3.12.4

`v3.12.3`

Compare Source

What's Changed

SemVer Patch

Add macCatalyst and visionOS to available platforms by @gjcairo in #348

Other Changes

Use centralized CMake checks by @rnro in #342
CONTRIBUTING.md CMake checks docs tweaks by @rnro in #343
Enable macOS CI on merge to main and daily timer by @rnro in #345
Enable macOS CI on pull requests by @rnro in #347

Full Changelog: apple/swift-crypto@3.12.2...3.12.3

`v3.12.2`

Compare Source

What's Changed

SemVer Patch

Fix availability mismatches by @gjcairo in #339

Full Changelog: apple/swift-crypto@3.12.1...3.12.2

`v3.12.1`: Swift Crypto 3.12.1

Compare Source

What's Changed

SemVer Patch

Add missing availability guards required when development mode enabled by @simonjbeaumont in #337

Full Changelog: apple/swift-crypto@3.12.0...3.12.1

`v3.12.0`: Swift Crypto 3.12.0

Compare Source

What's Changed

SemVer Minor

Update ARC API to reflect latest draft by @simonjbeaumont in #334
Add Sendable conformance to ARC API types by @simonjbeaumont in #335

SemVer Patch

Use more efficient serialization and deserialization for ARC types by @simonjbeaumont in #336

Full Changelog: apple/swift-crypto@3.11.2...3.12.0

`v3.11.2`

Compare Source

What's Changed

SemVer Patch

Replace platforms from Package manifest with availability guards by @gjcairo in #331

Other Changes

Rename nightly_6_1 params to nightly_next by @rnro in #332
Only apply standard swift settings on valid targets by @rnro in #333

Full Changelog: apple/swift-crypto@3.11.1...3.11.2

`v3.11.1`: Swift Crypto 3.11.1

Compare Source

What's Changed

SemVer Patch

Add missing availability on ARC types by @Lukasa in #330

Full Changelog: apple/swift-crypto@3.11.0...3.11.1

`v3.11.0`: Swift Crypto 3.11.0

Compare Source

What's Changed

SemVer Minor

extras: Add API for Anonymous Rate-Limited Credentials, ARC(P-384) by @simonjbeaumont in #328

SemVer Patch

Add the necessary swift defines in CMake for Crypto module by @cmcgee1024 in #323
Fix macos build failures cmake by @cmcgee1024 in #324
Add workaround for missing multi-threaded dll support on windows clang/ASM by @cmcgee1024 in #325
Fix CMakeLists.txt for Windows by @cmcgee1024 in #326

Full Changelog: apple/swift-crypto@3.10.2...3.11.0

`v3.10.2`: Swift Crypto 3.10.2

Compare Source

What's Changed

SemVer Patch

Add missing assembly files to CMake and generator script by @cmcgee1024 in #322

New Contributors

@cmcgee1024 made their first contribution in #322

Full Changelog: apple/swift-crypto@3.10.1...3.10.2

`v3.10.1`: Swift Crypto 3.10.1

Compare Source

What's Changed

SemVer Patch

Update BoringSSL to aefa5d2 by @Lukasa in #303 and #312
FreeBSD support by @michael-yuji in #315
Enable MemberImportVisibility check on all targets by @rnro in #310

Other Changes

Aligning semantic version label check name by @FranzBusch in #309
Enable swift-format in CI by @simonjbeaumont in #302
Add Intial DocC docs by @0xTim in #283
Fix DocC generation by @0xTim in #311
Improve DocC landing pages by @fpseverino in #313
Update release.yml by @FranzBusch in #316
CI use 6.1 nightlies by @rnro in #321

New Contributors

@michael-yuji made their first contribution in #315
@fpseverino made their first contribution in #313

Full Changelog: apple/swift-crypto@3.10.0...3.10.1

`v3.10.0`: Swift Crypto 3.10.0

Compare Source

What's Changed

SemVer Minor

extras: Add EC toolbox abstractions and OPRF(P-384, SHA-384) VOPRF API by @simonjbeaumont in #292

SemVer Patch

Fix potentially inconsistent coordinate slicing by @dimitribouniol in #299

Other Changes

add .editorconfig file by @rnro in #296
add .spi.yml by @rnro in #297

New Contributors

@dimitribouniol made their first contribution in #299

Full Changelog: apple/swift-crypto@3.9.1...3.10.0

`v3.9.1`: Swift Crypto 3.9.1

Compare Source

What's Changed

SemVer Patch

Fix Windows CI by @ptoffy in #289
Fix WASI platform build issue by @Kyle-Ye in #291

Other Changes

[CI] Enable Windows CI by @FranzBusch in #288

New Contributors

@Kyle-Ye made their first contribution in #291

Full Changelog: apple/swift-crypto@3.9.0...3.9.1

`v3.9.0`: Swift Crypto 3.9.0

Compare Source

What's Changed

SemVer Minor

PBKDF2 and scrypt by @admkopec in #98

SemVer Patch

wrapper: Move EC types and random bytes into CryptoBoringWrapper by @simonjbeaumont in #277
wrapper: Add modular arithmetic functions to ArbitraryPrecisionInteger by @simonjbeaumont in #284
Fix windows build and update BoringSSL to 2587c49 by @Lukasa in #279
Add support for new Android overlay, swiftlang/swift#74758 by @finagolfin in #286

Other Changes

[CI] Adopt GitHub actions by @FranzBusch in #280

New Contributors

@admkopec made their first contribution in #98

Full Changelog: apple/swift-crypto@3.8.1...3.9.0

`v3.8.1`: Swift Crypto 3.8.1

Compare Source

What's Changed

SemVer Patch

Support loading RSAPSS public keys with parameters by @gautierdelorme in #268
Update BoringSSL to 76968bb by @Lukasa in #271
Refactor and adopt package access to remove symlinked files by @simonjbeaumont in #265

New Contributors

@gautierdelorme made their first contribution in #268

Full Changelog: apple/swift-crypto@3.8.0...3.8.1

`v3.8.0`: Swift Crypto 3.8.0

Compare Source

What's Changed

SemVer Minor

extras: Add RSA primitives decoding API by @ptoffy in #249
extras: Add API to create RSA keys with random primes by @ptoffy in #250
Drop support for Swift 5.8 by @simonjbeaumont in #259
Add Equatable and Hashable conformance for CryptoKitError and CryptoKitASN1Error by @simonjbeaumont in #266

Other Changes

Only include privacy manifest on Darwin by @glbrntt in #257

Full Changelog: apple/swift-crypto@3.7.1...3.8.0

`v3.7.1`: Swift Crypto 3.7.1

Compare Source

What's Changed

SemVer Patch

Update BoringSSL to 6a2ccdc by @Lukasa in #255

Other Changes

Add release.yml by @FranzBusch in #253

Full Changelog: apple/swift-crypto@3.7.0...3.7.1

`v3.7.0`: Swift Crypto 3.7.0

Compare Source

SemVer Minor

Add support for AES CFB mode in _CryptoExtras (#252)

`v3.6.1`: Swift Crypto 3.6.1

Compare Source

SemVer Patch

Convert PrivacyInfo.xcprivacy symlinks to files (#251, patch credit to @jakepetroules)

`v3.6.0`: Swift Crypto 3.6.0

Compare Source

SemVer Minor

extras: Provide initializers for RSA keys from RSA parameters (#247)

SemVer Patch

Reduce the number of heap allocations when computing hash digests (#238, patch credit to @baarde)

`v3.5.2`: Swift Crypto 3.5.2

Compare Source

SemVer Patch

Revert to using @_implementationOnly for all BoringSSL modules (#246)

`v3.5.1`: Swift Crypto 3.5.1

Compare Source

SemVer Patch

build: Add missing prefix to BoringSSL delete_if stack symbols (#245)

`v3.5.0`: Swift Crypto 3.5.0

Compare Source

SemVer Minor

extras: Add APIs for RSA Blind Signatures (#232)

SemVer Patch

add support for riscv64 (#240, patch credit to @futurejones)
Move ArbitraryPrecisionInteger type to CryptoBoringWrapper module (#236)
Change inclusiveMin param of ArbitraryPrecisionInteger.random from UInt64 to UInt (#242)

Other Changes

Fix broken DataProtocol.hexString test utility (#230)
update README recommended versions (#233)

`v3.4.0`: Swift Crypto 3.4.0

Compare Source

SemVer Minor

Update lower bound for RSA key sizes (#218, patch credit to @ptoffy)

SemVer Patch

Add empty privacy manifest files (#226)
Use BoringSSL implementation for _CryptoExtras.AES._CTR (#229)

`v3.3.0`: Swift Crypto 3.3.0

Compare Source

SemVer Minor

Add support for AES CTR mode in _CryptoExtras (#220)
Raise minimum Swift version to 5.7 (#221)

SemVer Patch

Remove dtls1.h as part of removing libssl (#217, patch credit to @davidben)
Update BoringSSL to dbad745 (#222)

Other Changes

Documentation: Update macOS development instructions (#216, patch credit to @coldjugular)

`v3.2.0`: Swift Crypto 3.2.0

Compare Source

SemVer Minor

Add pkcs8PEMRepresenation for RSA private keys (#203, patch credit to @bjhomer)
Add support for CBC without padding (#210, patch credit to @lovetodream)
Add support for RSA OAEP with SHA256 (#206)
Add Sendable annotations to Crypto Extras (#211, #214)

SemVer Patch

Add extern C markers (#204, patch credit to @brianmichel)
Update BoringSSLRSAPublicKey to use EVP_PKEY API (#205)
Update BoringSSL to 7a81362 (#207, #215)

Other Changes

Add cxx interop build pipeline (#212)
Update availability annotations in tests (#213)

`v3.1.0`: Swift Crypto 3.1.0

Compare Source

SemVer Minor

Add support for AES-CBC in _CryptoExtras (#200)
Bump minimum Swift version to 5.7 (#201)

Configuration

📅 Schedule: (in timezone Pacific/Auckland)

Branch creation
- "before 9am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

# Conflicts: # Package.swift

renovate · 2026-07-09T03:27:18Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

chore(deps): update dependency apple/swift-crypto to v4

e1875ca

renovate Bot added the dependencies Pull requests that update a dependency file label Jul 9, 2026

Merge remote-tracking branch 'origin/main' into fix-pr22

034a643

# Conflicts: # Package.swift

bradwindy merged commit 5d38acc into main Jul 9, 2026
3 checks passed

bradwindy deleted the renovate/apple-swift-crypto-4.x branch July 9, 2026 03:30

Navigation Menu

Repository navigation

chore(deps): update dependency apple/swift-crypto to v4 - #22

chore(deps): update dependency apple/swift-crypto to v4#22
bradwindy merged 2 commits into
mainfrom
renovate/apple-swift-crypto-4.x

renovate Bot commented Jul 9, 2026

Uh oh!

renovate Bot commented Jul 9, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Jul 9, 2026

Release Notes

v4.5.0

What's Changed

SemVer Minor

SemVer Patch

New Contributors

v4.4.0

What's Changed

SemVer Minor

Other Changes

v4.3.1: Swift Crypto 4.3.1

Security Fixes

What's Changed

SemVer Patch

v4.3.0: Swift Crypto 4.3.0

What's Changed

SemVer Minor

Other Changes

v4.2.0

What's Changed

SemVer Minor

v4.1.0: Swift Crypto 4.1.0

What's Changed

SemVer Minor

SemVer Patch

Other Changes

New Contributors

v4.0.0: Swift Crypto 4.0.0

What's Changed

SemVer Major

v3.15.1: Swift Crypto 3.15.1

What's Changed

SemVer Patch

Other Changes

v3.15.0: Swift Crypto 3.15.0

What's Changed

SemVer Minor

SemVer Patch

Other Changes

New Contributors

v3.14.0: Swift Crypto 3.14.0

What's Changed

SemVer Minor

Other Changes

New Contributors

v3.13.3: Swift Crypto 3.13.3

What's Changed

SemVer Patch

Other Changes

v3.13.2: Swift Crypto 3.13.2

What's Changed

SemVer Patch

v3.13.1: Swift Crypto 3.13.1

What's Changed

SemVer Patch

New Contributors

v3.13.0: Swift Crypto 3.13.0

What's Changed

SemVer Minor

SemVer Patch

Other Changes

New Contributors

v3.12.5: Swift Crypto 3.12.5

What's Changed

SemVer Patch

v3.12.4: Swift Crypto 3.12.4

What's Changed

SemVer Patch

v3.12.3

What's Changed

SemVer Patch

Other Changes

v3.12.2

What's Changed

SemVer Patch

v3.12.1: Swift Crypto 3.12.1

What's Changed

SemVer Patch

`v4.5.0`

`v4.4.0`

`v4.3.1`: Swift Crypto 4.3.1

`v4.3.0`: Swift Crypto 4.3.0

`v4.2.0`

`v4.1.0`: Swift Crypto 4.1.0

`v4.0.0`: Swift Crypto 4.0.0

`v3.15.1`: Swift Crypto 3.15.1

`v3.15.0`: Swift Crypto 3.15.0

`v3.14.0`: Swift Crypto 3.14.0

`v3.13.3`: Swift Crypto 3.13.3

`v3.13.2`: Swift Crypto 3.13.2

`v3.13.1`: Swift Crypto 3.13.1

`v3.13.0`: Swift Crypto 3.13.0

`v3.12.5`: Swift Crypto 3.12.5

`v3.12.4`: Swift Crypto 3.12.4

`v3.12.3`

`v3.12.2`

`v3.12.1`: Swift Crypto 3.12.1

`v3.12.0`: Swift Crypto 3.12.0

`v3.11.2`

`v3.11.1`: Swift Crypto 3.11.1

`v3.11.0`: Swift Crypto 3.11.0

`v3.10.2`: Swift Crypto 3.10.2

`v3.10.1`: Swift Crypto 3.10.1

`v3.10.0`: Swift Crypto 3.10.0

`v3.9.1`: Swift Crypto 3.9.1

`v3.9.0`: Swift Crypto 3.9.0

`v3.8.1`: Swift Crypto 3.8.1

`v3.8.0`: Swift Crypto 3.8.0

`v3.7.1`: Swift Crypto 3.7.1

`v3.7.0`: Swift Crypto 3.7.0

`v3.6.1`: Swift Crypto 3.6.1

`v3.6.0`: Swift Crypto 3.6.0

`v3.5.2`: Swift Crypto 3.5.2

`v3.5.1`: Swift Crypto 3.5.1

`v3.5.0`: Swift Crypto 3.5.0