For the folks still on twitter (why tho?)
Two important @CocoaPods updates:
- @segiddins has shipped an update to trunk to not allow new pods to run scripts on your computer
- I've updated the blog/site with a new header that counts down to the specs repo going read-only
I'm breaking a lot of iOS builds today, sorry, but we were sent a report of a @CocoaPods RCE which I think means we should drop all existing sessions. If you are a pod author, you will need to log in again.
Read more on the blog: https://t.co/7gRrDBGCEl
Just landed a fix to the @CocoaPods Trunk authentication service that brought P95 response times from ~26s to 20ms (yes, the first number is seconds!). You can expect future invocations of `pod trunk push` and other commands to be a little faster 🚀
✨The https://t.co/rXVa5vkzVr website is back up and running!
I didn’t actually cause this issue but I did volunteer to help fix it 😇
It’s temporarily fixed now but will be lookin for a more permanent solution 💪
Hey folks, the security team at @snyksec raised 2 CVEs in the downloading API for @CocoaPods
- https://t.co/V2MR5OpjDX
- https://t.co/s15Syap5qS
Roughly, a Podspec 'source' can be used to trigger a shell command in git or hg. We've got fixed versions out + server-side checks.
Ten years ago today @alloy started writing @CocoaPods. Within a month, 0.0.1 looked like what we’ve been using for the last decade:
- Xcode project generation
- Podfiles
- Podspecs
- Multiple spec repo support
- Trunk with 7 dependencies
OK, I think that’s me done on @CocoaPods Trunk work. All useful db transactions now trigger an email to all of a Pods collaborators.
This sorta work consumes a lot of my spare time, if you enjoy it, I use GitHub Sponsors to cover costs:
https://t.co/Cd8JQ7m3XN
Hey folks, we’re sorry to issue a security advisory for @CocoaPods Trunk - we received an RCE report this morning, patched it within hours, but there's a chance someone could have exploited it.
- Post: https://t.co/J5SICSKkJR
- Security Advisory: https://t.co/YPisdoK0Kl
1.10.0 first beta was just released! 🚀
- Ruby 2.0 is out, 2.7 is in 💪
- Revamp of XCFramework support
- Initial support for Xcode 12
- A new post_integrate Podfile hook
https://t.co/oFRRwuEesJ
Shipped @CocoaPods first 1.9.0 beta! 🚀🎉
- XCFramework Support
- Configuration based dependencies in podspecs
- Static linkage support
- Swift Version Variants
Special thanks to @_amorde for his great work in adding XCFramework support! 🔥🔥
👇https://t.co/gYRPu57Cln
PSA: The beta CocoaPods CDN endpoint on @jsDelivr is no longer being updated
It's still up, but new podspecs will not be appearing there
Please update your setup to use the new endpoint at https://t.co/ldJl8QdqRK
You'll need to upgrade to CocoaPods 1.7.2 or higher for that