Spreedly iOS SDK 1.6.1-dev.20260824.1 (Dev Build)

Dev build 1.6.1-dev.20260824.1 (internal only)

Commit: c4a16d554b8b1299b275b86778d16117a7cb9e9b
Build: https://github.com/spreedly/checkout-ios-sdk/actions/runs/32701306388

Not for production. Pin with SPM exact: "1.6.1-dev.20260824.1" or CocoaPods :tag => '1.6.1-dev.20260824.1'.

Automatically published from merge to main.

Spreedly iOS SDK 1.6.1-dev.20260819.1 (Dev Build)

Dev build 1.6.1-dev.20260819.1 (internal only)

Commit: 55ca06e7fa8d868b0193273434f1f8f3e58efeb1
Build: https://github.com/spreedly/checkout-ios-sdk/actions/runs/32234264435

Not for production. Pin with SPM exact: "1.6.1-dev.20260819.1" or CocoaPods :tag => '1.6.1-dev.20260819.1'.

Automatically published from merge to main.

Spreedly iOS SDK 1.6.1

Added

• Payment method details on PaymentResult: After successful card, bank-account, or offsite tokenize, and after successful CVV recache, merchants can read the API payment_method via result.paymentResponse?.transaction?.paymentMethod (Swift) — including lastFourDigits, firstSixDigits, card/ACH/offsite fields, and typed binMetadata. Objective-C: paymentResponseDictionary on PaymentResult (same nested camelCase shape).

Security

• Click to Pay host-page injection hardening: srcDpaId and locale are validated before host load and safely encoded when substituted into the Click to Pay WebView host page; Mastercard lib.js query parameters are percent-encoded.
• Click to Pay WebView hardening: Release builds no longer mark Click to Pay WebViews as inspectable; native bridge handlers accept main-frame messages only; inbound bridge payloads reject additional cardholder-data key aliases; sandbox Mastercard hosts are allowed only when isSandbox is true.
• Mandate nesting resource guard: Mandates that nest beyond the client resource depth are rejected at request construction instead of risking a host-app crash during tokenization.

Spreedly iOS SDK 1.6.1-dev.20260817.1 (Dev Build)

Dev build 1.6.1-dev.20260817.1 (internal only)

Commit: c7b3933649e5aa3584b4bf4f2f1ce66fa09a4f40
Build: https://github.com/spreedly/checkout-ios-sdk/actions/runs/32019263425

Not for production. Pin with SPM exact: "1.6.1-dev.20260817.1" or CocoaPods :tag => '1.6.1-dev.20260817.1'.

Automatically published from merge to main.

Spreedly iOS SDK 1.6.1-rc.1 (Release Candidate)

Added

• Payment method details on PaymentResult: After successful card, bank-account, or offsite tokenize, and after successful CVV recache, merchants can read the API payment_method via result.paymentResponse?.transaction?.paymentMethod (Swift) — including lastFourDigits, firstSixDigits, card/ACH/offsite fields, and typed binMetadata. Objective-C: paymentResponseDictionary on PaymentResult (same nested camelCase shape).

Security

• Click to Pay host-page injection hardening: srcDpaId and locale are validated before host load and safely encoded when substituted into the Click to Pay WebView host page; Mastercard lib.js query parameters are percent-encoded.
• Click to Pay WebView hardening: Release builds no longer mark Click to Pay WebViews as inspectable; native bridge handlers accept main-frame messages only; inbound bridge payloads reject additional cardholder-data key aliases; sandbox Mastercard hosts are allowed only when isSandbox is true.
• Mandate nesting resource guard: Mandates that nest beyond the client resource depth are rejected at request construction instead of risking a host-app crash during tokenization.

Spreedly iOS SDK 1.6.1-dev.20260812.1 (Dev Build)

Dev build 1.6.1-dev.20260812.1 (internal only)

Commit: 93eb864ee78dfaa53c21941fb2baa11e9bd5e92e
Build: https://github.com/spreedly/checkout-ios-sdk/actions/runs/31627650175

Not for production. Pin with SPM exact: "1.6.1-dev.20260812.1" or CocoaPods :tag => '1.6.1-dev.20260812.1'.

Automatically published from merge to main.

Spreedly iOS SDK 1.6.0-dev.20260812.1 (Dev Build)

Dev build 1.6.0-dev.20260812.1 (internal only)

Commit: 15f79e449346ecb2d83480701a3b529a81103956
Build: https://github.com/spreedly/checkout-ios-sdk/actions/runs/31593482230

Not for production. Pin with SPM exact: "1.6.0-dev.20260812.1" or CocoaPods :tag => '1.6.0-dev.20260812.1'.

Automatically published from merge to main.

Spreedly iOS SDK 1.6.0-dev.20260806.3 (Dev Build)

Dev build 1.6.0-dev.20260806.3 (internal only)

Commit: 846186cfd6dbcf6a6a926d93fad9352d09bc7000
Build: https://github.com/spreedly/checkout-ios-sdk/actions/runs/31104568869

Not for production. Pin with SPM exact: "1.6.0-dev.20260806.3" or CocoaPods :tag => '1.6.0-dev.20260806.3'.

Automatically published from merge to main.

Spreedly iOS SDK 1.6.0-dev.20260806.2 (Dev Build)

Dev build 1.6.0-dev.20260806.2 (internal only)

Commit: 77081edcc6174dbde8ecf2f504bff9e5675adc96
Build: https://github.com/spreedly/checkout-ios-sdk/actions/runs/31085853758

Not for production. Pin with SPM exact: "1.6.0-dev.20260806.2" or CocoaPods :tag => '1.6.0-dev.20260806.2'.

Automatically published from merge to main.

Spreedly iOS SDK 1.6.0-dev.20260806.1 (Dev Build)

Dev build 1.6.0-dev.20260806.1 (internal only)

Commit: f2fcc2eb57e6d697f53d9f0b00f1b2f3285ef83c
Build: https://github.com/spreedly/checkout-ios-sdk/actions/runs/31077717904

Not for production. Pin with SPM exact: "1.6.0-dev.20260806.1" or CocoaPods :tag => '1.6.0-dev.20260806.1'.

Automatically published from merge to main.