build(deps): bump github.com/sparkle-project/sparkle from 2.9.2 to 2.10.0

[dependabot]

Bumps github.com/sparkle-project/sparkle from 2.9.2 to 2.10.0.

Release notes

Sourced from github.com/sparkle-project/sparkle's releases.

2.10.0 Golden Gate Bump

Changes:

• Bump minimum deployment target to macOS 12.0 (#2883, #2892) (Zorg, F1248)
• Don't copy updater progress tool app outside of its bundle (#2900) (Zorg)
• Fix updating not working the first time if bundle ID ends with ".service" or other irregular bundle-like extensions (#2909) (Zorg, youngjunning)
• Fix using appcast length fallback if server reports no content size (resulting in indeterminate progress) (#2922) (Zorg)
• Fix reading release notes content length from appcast for signed feed diagnostics (#2921) (Leo Camus)
• Update European Portuguese localization (#2912) (Andrei)
• Fix temporary file leaks when applying binary delta file fails (#2906) (Zorg)
• Optimize and move updating mdimporter bundles to BinaryDelta applying code (#2905) (Zorg)
• Fix re-applying file system compression for delta updates on macOS 27 (#2904) (Zorg)
• Remove CocoaPods support (#2899) (Zorg)

macOS 12.0 or later is now required (due to Xcode 27 dropping support for deploying to older OS versions). CocoaPods support is also now dropped.

If you're not generating appcasts automatically, remember to add <sparkle:minimumSystemVersion>12.0</sparkle:minimumSystemVersion> element to <item>s in your appcast.

Discussion

2.10.0-beta.1

Changes:

• Bump minimum deployment target to macOS 12.0 (#2883, #2892) (Zorg, F1248)
• Remove CocoaPods support (#2899) (Zorg)
• Don't copy updater progress tool app outside of its bundle (#2900) (Zorg)
• Fix re-applying file system compression for delta updates on macOS 27 (#2904) (Zorg)
• Optimize and move updating mdimporter bundles to BinaryDelta applying code (#2905) (Zorg)
• Fix temporary file leaks when applying binary delta file fails (#2906) (Zorg)
• Fix updating not working the first time if bundle ID ends with ".service" or other irregular bundle-like extensions (#2909) (Zorg, youngjunning)

macOS 12.0 or later is now required (due to Xcode 27 dropping support for deploying to older OS versions). CocoaPods support is also now dropped.

If you're not generating appcasts automatically, remember to add <sparkle:minimumSystemVersion>12.0</sparkle:minimumSystemVersion> element to <item>s in your appcast.

Discussion

2.9.6 Appcast Improvements

Changes:

• Harden safety of installer moving the download archive (#2898) (Zorg, Joshua Rogers)
• Don't copy progress tool for root user (#2897) (Zorg, Joshua Rogers)
• Reject package based installs when signing validation failed (#2895) (Zorg)

This release contains a couple of security fixes reported by @​MegaManSec including a high-complex symlink security fix, and a privilege escalation fix affecting processes running as root using Sparkle (like running sparkle-cli as root). Details are updated in sparkle-project/Sparkle#2838.

Please also check 2.9.5, 2.9.4, 2.9.3, 2.9.2, 2.9.1, and 2.9.0 for previous changes.

2.9.5 Appcast Improvements

Changes:

... (truncated)

Commits

• eef1a53 Update Package management files for version 2.10.0
• 19041aa Update CHANGELOG for 2.10.0 with new changes
• c98fe67 Fix unused appcast length fallback if server reports no content size (#2922)
• 89f135b Fix reading release notes content length from appcast (#2921)
• 3c28a55 Update Package management files for version 2.10.0
• bb91fff Update CHANGELOG for 2.10 to include localization change
• 5f2b248 Leave breadcrumb for running generate_progress_tool_localizations.py (#2915)
• 5fc946b Update European Portuguese localization (#2912)
• 39c97c9 Update Package management files for version 2.10.0-beta.1
• c9afdf8 Update CHANGELOG for version 2.10
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.