Skip to content

fix(deps): bump github.com/alamofire/alamofire from 5.10.2 to 5.12.0 - #247

Merged
mpivchev merged 1 commit into
mainfrom
dependabot/swift/github.com/alamofire/alamofire-5.12.0
Aug 11, 2026
Merged

fix(deps): bump github.com/alamofire/alamofire from 5.10.2 to 5.12.0#247
mpivchev merged 1 commit into
mainfrom
dependabot/swift/github.com/alamofire/alamofire-5.12.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/alamofire/alamofire from 5.10.2 to 5.12.0.

Release notes

Sourced from github.com/alamofire/alamofire's releases.

5.12.0

Released on 2026-05-04. All issues associated with this milestone can be found using this filter.

Added

  • FreeBSD compilation support.

Updated

  • Various CI configurations.

Fixed

  • Rare race in Request.suspend() and Request.cancel() where the state update would be lost if it occurred before the task was created.
  • Request.cancel() incorrect called Request.finish() when the underlying task was already .completed.
  • Rare race in Request.resume() that could lead to multiple URLSessionTasks created.
  • Repeated calls to Request.suspend() and Request.resume() could lead to multiple pipeline executions.
  • Thread-safety issue in Session.deinit when accessing internal state.
  • Rare Request.finish() race in Session.deinit.
  • Session.deinit called Request.finish() on Requests that were already finished.
  • Request.onHTTPRequest didn't call the full Request.cancel() when the .cancel disposition was returned.
  • Multiple unlikely force unwrap or unowned self crashes.
  • Write to DataStreamRequest's outputStream after it was closed.
  • MIME type parsing, where a single element (text) or empty strings would be accepted.
  • Cancelled DownloadRequests could still trigger retry.
  • DataRequest.DataTask and DownloadRequest.DownloadTask could miss early cancellation events if they happened before the underlying Task was created.
  • 🔥 Multiple issues in AuthenticationInterceptor. These fixes slightly change the interceptor's behavior.
    1. adapt() enqueued adaptations, leading to requests restarted with a new credential to not execute the whole adapt pipeline again. AuthenticationInterceptor will now let those requests fail with the old credential and retry their whole pipeline with the new credential.
    2. Concurrent adaptations for the same stale credential could trigger multiple refreshes.
    3. retry() now lazily checks for new credentials rather than capturing eagerly.

5.11.2

Updated

  • Use of #file to #fileID to prevent build system info leakage.
  • CI and dependencies.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/alamofire/alamofire](https://github.com/Alamofire/Alamofire) from 5.10.2 to 5.12.0.
- [Release notes](https://github.com/Alamofire/Alamofire/releases)
- [Commits](Alamofire/Alamofire@5.10.2...5.12.0)

---
updated-dependencies:
- dependency-name: github.com/alamofire/alamofire
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@mpivchev
mpivchev requested review from marinofaggiana and removed request for marinofaggiana August 11, 2026 11:03
@mpivchev
mpivchev merged commit 59d27f8 into main Aug 11, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/swift/github.com/alamofire/alamofire-5.12.0 branch August 11, 2026 11:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant