Skip to content

fix(deps): resolve the contract packages at the versions the manifest pins - #778

Merged
bmc08gt merged 1 commit into
mainfrom
fix/resolve-contract-pins
Sep 15, 2026
Merged

bmc08gt merged 1 commit into
mainfrom
fix/resolve-contract-pins

Conversation

@bmc08gt

@bmc08gt bmc08gt commented Sep 15, 2026

Copy link
Copy Markdown
Collaborator

The workspace Package.resolved still recorded ocp-client-protocol at 0.3.0 and flipcash2-client-protocol at 0.5.0, while FlipcashAPI/Package.swift pins 0.4.0 and 0.6.0 after #764 and #769. Neither PR regenerated the lock.

Xcode Cloud archives with automatic dependency resolution disabled, so a stale lock is a hard error rather than a silent re-resolve. "Deploy Flipcash" build #542 failed on main with:

an out-of-date resolved file was detected at …/Code.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved, which is not allowed when automatic dependency resolution is disabled

The vector gate never caught it: it builds the CrossPlatformVectors-Package and FlipcashCoreVectors-Package schemes with resolution enabled and never opens Code.xcodeproj, and FlipcashCore does not depend on FlipcashAPI.

Regenerated with xcodebuild -resolvePackageDependencies. The diff is the two contract entries and originHash; no other dependency moves. The recorded revisions are the release tags' commits — 301a07af for flipcash2 0.6.0, 15ce331d for ocp 0.4.0.

… pins

#764 bumped ocp to 0.4.0 and #769 bumped flipcash2 to 0.6.0 without regenerating
the workspace's Package.resolved, so it still recorded 0.3.0 and 0.5.0. Xcode
Cloud archives with automatic dependency resolution disabled, which turns that
mismatch into a hard error rather than a silent re-resolve: "Deploy Flipcash"
build #542 failed with "an out-of-date resolved file was detected". The vector
gate builds the SPM schemes with resolution enabled and never opens
Code.xcodeproj, so it stayed green.

Regenerated with xcodebuild -resolvePackageDependencies. Only the two contract
entries and originHash move.
@bmc08gt bmc08gt self-assigned this Sep 15, 2026
@bmc08gt
bmc08gt merged commit 58f68a8 into main Sep 15, 2026
1 check passed
@bmc08gt
bmc08gt deleted the fix/resolve-contract-pins branch September 15, 2026 18:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant