Skip to content

chore: upgrade iOS SDK to 3.27.0#111

Closed
brax10ward wants to merge 1 commit intomasterfrom
chore/update-ios-sdk-3.27.0
Closed

chore: upgrade iOS SDK to 3.27.0#111
brax10ward wants to merge 1 commit intomasterfrom
chore/update-ios-sdk-3.27.0

Conversation

@brax10ward
Copy link
Contributor

Automated upgrade of vendored iOS XCFrameworks to version 3.27.0.

Release notes: https://github.com/atomicfi/atomic-transact-ios/releases/tag/3.27.0

@brax10ward brax10ward requested a review from a team March 17, 2026 20:12
@semgrep-app
Copy link

semgrep-app bot commented Mar 17, 2026

Semgrep found 8 ATS-consider-pinning findings:

  • ios/frameworks/QuantumIOS.xcframework/ios-arm64_x86_64-simulator/QuantumIOS.framework/Info.plist
  • ios/frameworks/QuantumIOS.xcframework/ios-arm64/QuantumIOS.framework/Info.plist
  • ios/frameworks/QuantumIOS.xcframework/Info.plist
  • ios/frameworks/MuppetIOS.xcframework/ios-arm64_x86_64-simulator/MuppetIOS.framework/Info.plist
  • ios/frameworks/MuppetIOS.xcframework/ios-arm64/MuppetIOS.framework/Info.plist
  • ios/frameworks/AtomicTransact.xcframework/ios-arm64_x86_64-simulator/AtomicTransact.framework/Info.plist
  • ios/frameworks/AtomicTransact.xcframework/ios-arm64/AtomicTransact.framework/Info.plist
  • ios/frameworks/AtomicTransact.xcframework/Info.plist

The application's App Transport Security (ATS) configuration does not leverage the in-built public key pinning mechanisms. The application should consider leverage ATS public key pinning to ensure that the application only communicates to serves with an allow-listed certificate (and public key). By default the device will allow connections if the default trust store (CA store) posesses the right certificates. The number of accepted Certificate Authorities by default is hundreds. Using public key pinning vastly reduces the attack surface.

⚪️ This finding does not block your pull request.
Ignore this finding from ATS-consider-pinning

@brax10ward brax10ward closed this Mar 17, 2026
@brax10ward brax10ward deleted the chore/update-ios-sdk-3.27.0 branch March 17, 2026 20:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant