Update iOS builds to Xcode 26.2 / iOS 26 SDK by devin-ai-integration[bot] · Pull Request #441 · OpenSecretCloud/Maple

devin-ai-integration · 2026-02-25T20:44:07Z

Update iOS builds to Xcode 26.2 / iOS 26 SDK

Summary

Addresses the ITMS-90725 App Store Connect warning requiring all iOS/iPadOS apps to be built with the iOS 26 SDK (Xcode 26+) by April 28, 2026.

CI/CD changes (both `mobile-build.yml` and `testflight-on-comment.yml`)

Runner: macos-latest-xlarge → macos-26-xlarge (pinned to macOS 26 Tahoe, which ships with Xcode 26.2)
Xcode: 16.4 → 26.2 (latest stable Xcode with iOS 26 SDK)
ONNX Runtime cache key: includes xcode26.2 to force a clean rebuild against the new SDK
Xcode DerivedData cache key: includes xcode26.2 to avoid restoring stale build products from Xcode 16.4
Added IPHONEOS_DEPLOYMENT_TARGET: '16.0' env var to Tauri build steps (belt-and-suspenders for swift-rs)
Added explicit rustc-link-lib = ["c++"] for iOS targets in the generated cargo config (required because the cargo config override for ort-sys suppresses its build script's cargo:rustc-link-lib=c++, leaving C++ stdlib symbols from ONNX Runtime unresolved)

iOS deployment target: 13.0 → 16.0

⚠️ This is a user-visible change: devices running iOS 13–15 will no longer be supported.

Xcode 26 no longer ships the Swift back-deployment compatibility libraries (swiftCompatibility56, swiftCompatibilityConcurrency), which are needed when targeting iOS < 16. Without bumping the deployment target, the linker fails with undefined symbols for these libraries.

Updated in:

project.pbxproj (all 3 build configurations)
project.yml
Podfile
tauri.conf.json — added "minimumSystemVersion": "16.0" to the iOS bundle config so Tauri CLI correctly propagates the deployment target to swift-rs during the Cargo build

No changes to release.yml or desktop-build.yml since those don't include iOS build jobs.

Review & Testing Checklist for Human

Confirm the iOS 16.0 minimum deployment target is acceptable. This PR drops support for iOS 13–15. This was required by Xcode 26 (no Swift back-deployment libs), but verify this aligns with your user base expectations.
Verify macos-26-xlarge runner availability for the org — if your GitHub plan doesn't include macOS 26 large runners, jobs will queue indefinitely. Fallback would be macos-15-xlarge with xcode-version: '26'.
Trigger a test iOS build on this branch (e.g. comment testflight build) to confirm the full pipeline succeeds end-to-end with Xcode 26.2. CI is still running — the ONNX Runtime source build takes ~90 min on cache miss.
Check for new build warnings from the iOS 26 SDK — the Xcode 16→26 jump is significant and may surface new deprecations.

Notes

The first build after merge will be slow (~90 min) due to ONNX Runtime rebuilding from source (cache miss from the new Xcode version key).
The release.yml build-tauri job only builds macOS desktop + Linux, not iOS, so it was intentionally left unchanged.

Link to Devin run: https://app.devin.ai/sessions/fc1cbb39e9d44ab68e16b78e917d46fe
Requested by: @AnthonyRonning

Summary by CodeRabbit

Chores
- Updated build environment configurations to use newer macOS and Xcode versions.
- Updated related build cache settings for mobile and TestFlight deployments.
- Bumped iOS minimum deployment target from 13.0 to 16.0.

- Update runner from macos-latest-xlarge to macos-26-xlarge for both mobile-build and testflight-on-comment workflows - Update Xcode version from 16.4 to 26.2 (includes iOS 26 SDK) - Resolves ITMS-90725 SDK version warning from App Store Connect requiring iOS 26 SDK by April 28, 2026 Co-Authored-By: unknown <>

devin-ai-integration · 2026-02-25T20:44:13Z

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

Disable automatic comment and CI monitoring

cloudflare-workers-and-pages · 2026-02-25T20:44:41Z

Deploying maple with Cloudflare Pages

Latest commit:	`dfd3d2c`
Status:	✅ Deploy successful!
Preview URL:	https://7b1d01fd.maple-ca8.pages.dev
Branch Preview URL:	https://devin-1772052170-update-xcod.maple-ca8.pages.dev

View logs

In general, the problem is fixed by explicitly setting a permissions: block in the workflow to restrict the GITHUB_TOKEN to the minimal required scopes, instead of relying on potentially broad repository defaults. This can be done at the workflow root (affecting all jobs without their own permissions) or per job.

For this specific workflow, the build-ios job only needs to read repository contents (for actions/checkout and cache key hashing). None of the steps push commits, create releases, or modify issues/PRs. Therefore, the safest and simplest fix is to add a permissions: block at the workflow root level (just under name: or under on:) that sets contents: read. This documents the intended usage and constrains the GITHUB_TOKEN for all current and future jobs unless they override it.

Concretely, in .github/workflows/mobile-build.yml, add:

permissions: contents: read

at the top workflow level, e.g., between name: Mobile App CI and on:. No imports or other changes are required.

Include Xcode version in cache key to avoid reusing stale binaries compiled with the old iOS 18 SDK (Xcode 16.4). Co-Authored-By: unknown <>

Xcode 26.2 no longer ships Swift back-deployment compatibility libraries (swiftCompatibility56, swiftCompatibilityConcurrency, swiftCompatibilityPacks) needed for iOS < 16. Bumping the minimum deployment target to iOS 16.0 resolves the undefined symbol linker errors. Updated in project.yml, project.pbxproj (all 3 build configs), and Podfile. Co-Authored-By: unknown <>

AnthonyRonning · 2026-02-25T21:18:44Z

@coderabbitai review

coderabbitai · 2026-02-25T21:18:57Z

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

coderabbitai · 2026-02-25T21:19:02Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

📝 Walkthrough

Walkthrough

Two GitHub Actions workflow files are updated to target newer macOS and Xcode environments. The macOS runner is changed from macos-latest-xlarge to macos-26-xlarge, Xcode version is upgraded from 16.4 to 26.2, and ONNX runtime cache keys are modified to align with the new Xcode configuration.

Changes

Cohort / File(s)	Summary
CI Workflow Infrastructure `.github/workflows/mobile-build.yml`, `.github/workflows/testflight-on-comment.yml`	Updated macOS runner from `macos-latest-xlarge` to `macos-26-xlarge`, upgraded Xcode from version 16.4 to 26.2, and modified ONNX runtime cache keys to include `xcode26.2` suffix for environment alignment.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

ci: upgrade to larger GitHub Actions runners #379 — Modifies the same GitHub Actions workflow files to update runner and Xcode configurations.

Poem

🐰 Hop along, workflows so fine,
Xcode twenty-six, macOS align,
Cache keys dance with version new,
CI pipelines refresh their brew! ✨

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title directly and accurately summarizes the main changes: updating iOS builds to use Xcode 26.2 and iOS 26 SDK, which is the core objective of the pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch devin/1772052170-update-xcode-ios26-sdk

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

The Rust/Cargo build process compiles Swift bridge code (via swift-rs) using a deployment target derived from the Rust target triple, which defaults to a very old iOS version. This causes the Swift compiler to emit references to swiftCompatibility back-deployment libraries that Xcode 26.2 no longer ships. Setting IPHONEOS_DEPLOYMENT_TARGET=16.0 in the build environment ensures the Swift bridge code is compiled without these back-deployment references. Co-Authored-By: unknown <>

…loyment target Co-Authored-By: unknown <>

Co-Authored-By: unknown <>

When cargo config overrides ort-sys link metadata, the build script's cargo:rustc-link-lib=c++ is suppressed. This adds explicit libc++ linking to resolve C++ stdlib symbol errors from ONNX Runtime. Co-Authored-By: unknown <>

devin-ai-integration

Devin Review found 1 new potential issue.

View 12 additional findings in Devin Review.

rustc-link-lib is only valid under [target.<triple>.<links>] sub-tables, not directly under [target.<triple>]. Moved c++ into the existing .onnxruntime sections. Co-Authored-By: unknown <>

AnthonyRonning · 2026-02-25T23:24:10Z

@TestFlight build

github-actions · 2026-02-25T23:24:20Z

🚀 TestFlight deployment triggered! Check the Actions tab for progress.

github-actions · 2026-02-25T23:27:56Z

❌ TestFlight deployment failed. Check the workflow logs for details.

devin-ai-integration Bot assigned AnthonyRonning Feb 25, 2026

devin-ai-integration Bot requested a review from AnthonyRonning February 25, 2026 20:44

github-advanced-security AI found potential problems Feb 25, 2026

View reviewed changes

This comment was marked as resolved.

Sign in to view

devin-ai-integration Bot added 2 commits February 25, 2026 20:47

Bump ONNX Runtime cache key to force rebuild with Xcode 26.2

cc5b4ea

Include Xcode version in cache key to avoid reusing stale binaries compiled with the old iOS 18 SDK (Xcode 16.4). Co-Authored-By: unknown <>

This comment was marked as resolved.

Sign in to view

Add iOS minimumSystemVersion 16.0 to tauri.conf.json for swift-rs dep…

8ea03c8

…loyment target Co-Authored-By: unknown <>

This comment was marked as resolved.

Sign in to view

devin-ai-integration Bot added 2 commits February 25, 2026 21:49

Add Xcode version to DerivedData cache keys to avoid stale cache

7a55b57

Co-Authored-By: unknown <>

Add explicit libc++ linking for iOS targets in cargo config

d0d3f36

When cargo config overrides ort-sys link metadata, the build script's cargo:rustc-link-lib=c++ is suppressed. This adds explicit libc++ linking to resolve C++ stdlib symbol errors from ONNX Runtime. Co-Authored-By: unknown <>

devin-ai-integration Bot commented Feb 25, 2026

View reviewed changes

Comment thread .github/workflows/mobile-build.yml Outdated

Move libc++ linking into .onnxruntime links-override sections

dfd3d2c

rustc-link-lib is only valid under [target.<triple>.<links>] sub-tables, not directly under [target.<triple>]. Moved c++ into the existing .onnxruntime sections. Co-Authored-By: unknown <>

AnthonyRonning merged commit 2323480 into master Feb 26, 2026
14 checks passed

AnthonyRonning deleted the devin/1772052170-update-xcode-ios26-sdk branch February 26, 2026 01:54

@@ -1,5 +1,8 @@
             name: Mobile App CI
+            permissions:
+              contents: read
             on:
               push:
                 branches: [ master ]

Conversation

devin-ai-integration Bot commented Feb 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Update iOS builds to Xcode 26.2 / iOS 26 SDK

Summary

CI/CD changes (both mobile-build.yml and testflight-on-comment.yml)

iOS deployment target: 13.0 → 16.0

Review & Testing Checklist for Human

Notes

Summary by CodeRabbit

Uh oh!

devin-ai-integration Bot commented Feb 25, 2026

🤖 Devin AI Engineer

Uh oh!

cloudflare-workers-and-pages Bot commented Feb 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying maple with Cloudflare Pages

Uh oh!

Check warning

Copilot Autofix

This comment was marked as resolved.

Uh oh!

AnthonyRonning commented Feb 25, 2026

Uh oh!

coderabbitai Bot commented Feb 25, 2026

Uh oh!

coderabbitai Bot commented Feb 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Poem

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

AnthonyRonning commented Feb 25, 2026

Uh oh!

github-actions Bot commented Feb 25, 2026

Uh oh!

github-actions Bot commented Feb 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

devin-ai-integration Bot commented Feb 25, 2026 •

edited

Loading

CI/CD changes (both `mobile-build.yml` and `testflight-on-comment.yml`)

cloudflare-workers-and-pages Bot commented Feb 25, 2026 •

edited

Loading

coderabbitai Bot commented Feb 25, 2026 •

edited

Loading