Skip to content

fix(deps): resolve flipcash2-client-protocol at the 0.7.0 the manifest pins - #786

Merged
bmc08gt merged 1 commit into
mainfrom
fix/deps-flipcash2-0-7-0
Sep 16, 2026
Merged

bmc08gt merged 1 commit into
mainfrom
fix/deps-flipcash2-0-7-0

Conversation

@bmc08gt

@bmc08gt bmc08gt commented Sep 16, 2026

Copy link
Copy Markdown
Collaborator

FlipcashAPI/Package.swift has pinned flipcash2-client-protocol at exact: "0.7.0" since #779, but the workspace Package.resolved was still on 0.6.0. Xcode Cloud runs with automatic dependency resolution disabled, so it rejects the stale file instead of re-resolving:

an out-of-date resolved file was detected at
/Volumes/workspace/repository/Code.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved,
which is not allowed when automatic dependency resolution is disabled;
please make sure to update the file to reflect the changes in dependencies.
Running resolver because requirements have changed.

That failed the TestFlight deploy on a7335f1c after two minutes, in Resolve Dependencies. The last green deploy was 58f68a8c#778, which is the previous round of the same fix.

No local build could have caught it. FLIPCASH_PROTO_LOCAL replaces the contract packages with path dependencies and removes their entries from the resolved file, so every build on the override resolves the local checkout and never reads the pin.

8a7dc040f34c8ebf95446ac05fac9366a780ccc9 is the commit behind the upstream 0.7.0 tag. originHash changes alongside it because the requirement set itself moved.

…t pins

#779 moved `FlipcashAPI/Package.swift` to `exact: "0.7.0"` but left the
workspace `Package.resolved` on 0.6.0. Xcode Cloud disables automatic
dependency resolution, so it refuses the stale file outright:

    an out-of-date resolved file was detected at
    .../Code.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved,
    which is not allowed when automatic dependency resolution is disabled

That is what failed the TestFlight deploy on a7335f1, two minutes in, during
Resolve Dependencies.

Nothing local caught it: `FLIPCASH_PROTO_LOCAL` drops the contract entries
from the resolved file entirely, so every build on the override resolved the
path dependency and never read the stale pin.

Revision 8a7dc040 is the commit behind the upstream 0.7.0 tag; the
`originHash` moves with it because the requirement itself changed.
@bmc08gt bmc08gt self-assigned this Sep 16, 2026
@bmc08gt
bmc08gt merged commit c3c4c99 into main Sep 16, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant