Summary
This is a breaking release, required to support Xcode 27. Minimum deployment targets are bumped to iOS 15.0, macOS 12.0, tvOS 15.0 and watchOS 9.0 (where applicable). Swift Package Manager users will need Swift 5.7 / Xcode 14 or later to resolve the package, due to the dependency on AppAuth 3.0.0. The GTMSessionFetcher dependency is also widened to allow 4.x and 5.x, so projects are no longer held at 3.x by GTMAppAuth.
Projects that must keep supporting iOS 12-14 should stay on GTMAppAuth 5.x, which remains buildable with Xcode 26 and earlier.
If your project implements AppAuth's OIDExternalUserAgentSession protocol directly, note that resumeExternalUserAgentFlowWithURL:error: became required in AppAuth 3.0.0. See the AppAuth 3.0.0 release notes. GTMAppAuth's own API is otherwise unchanged.
Public-facing Changes
#280: AppAuth updated to 3.0.0, and minimums raised to iOS 15.0, macOS 12.0,
tvOS 15.0, watchOS 9.0 and swift-tools-version 5.7
#284: GTMSessionFetcher dependency widened to allow 4.x and 5.x (issue #273)
#278: iOS example migrated to the UIScene lifecycle, now iOS 15+
#279: iOS example switched to xcconfig-based client configuration
#267: Swift 6 compile fixes (issue #258). As a result, KeychainAttribute and its nested Attribute enum now conform to Sendable.
Example-app fixes
The macOS CocoaPods example still declared a 10.12 deployment target, which Xcode 27 refuses to build.
The iOS CocoaPods example goofed at launch because #279 wired the xcconfig into the SPM project only.
Additional Changes
#266, #274 and #282 (CI runners and workflow token permissions)
The Gemfile is regenerated for CocoaPods 1.17.0.