Release Loop v3.14.12; merge dev to main

.github/workflows/add_identifiers.yml

@@ -3,6 +3,9 @@ run-name: Add Identifiers (${{ github.ref_name }})
 on:
   workflow_dispatch:
 
+env:
+  FASTLANE_SKIP_UPDATE_CHECK: true
+
 jobs:
   validate:
     name: Validate

.github/workflows/build_loop.yml

@@ -1,13 +1,18 @@
-name: 4. Build Loop Manual
-run-name: Build Loop Manual (${{ github.ref_name }})
+name: 4. Build Loop
+run-name: Build Loop (${{ github.ref_name }})
 on:
   workflow_dispatch:
+  schedule:
+    # Check for updates every Sunday
+    #   Later logic builds if there are updates or if it is the 2nd Sunday of the month
+    - cron: "33 7 * * 0" # Sunday at UTC 7:33
 
 env:
   GH_PAT: ${{ secrets.GH_PAT }}
   UPSTREAM_REPO: LoopKit/LoopWorkspace
   UPSTREAM_BRANCH: ${{ github.ref_name }} # branch on upstream repository to sync from (replace with specific branch name if needed)
   TARGET_BRANCH: ${{ github.ref_name }} # target branch on fork to be kept in sync
+  FASTLANE_SKIP_UPDATE_CHECK: true
 
 jobs:
   # use a single runner for these sequential steps
@@ -144,6 +149,30 @@ jobs:
             echo "is_second_instance=false" >> "$GITHUB_OUTPUT"
           fi
 
+  # When a scheduled run finds nothing new to build, cancel the run so it shows
+  # as "cancelled" instead of "success" — a green check should always mean a
+  # new build was made.
+  cancel_when_no_build:
+    needs: check_status
+    name: Cancel run when there is nothing to build
+    runs-on: ubuntu-26.04
+    permissions:
+      actions: write
+    if: |
+      github.event_name == 'schedule' &&
+        !(vars.SCHEDULED_BUILD != 'false' && needs.check_status.outputs.IS_SECOND_IN_MONTH == 'true') &&
+        !(vars.SCHEDULED_SYNC != 'false' && needs.check_status.outputs.NEW_COMMITS == 'true')
+    steps:
+      - name: Cancel the run
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          echo "Repository is up to date and no monthly build is due — cancelling this run so it is not reported as a successful build." >> "$GITHUB_STEP_SUMMARY"
+          gh run cancel ${{ github.run_id }} --repo ${{ github.repository }}
+          # Keep the job alive until the cancellation lands, so the run ends as
+          # "cancelled" rather than completing successfully first.
+          sleep 300
+
   # Checks if Distribution certificate is present and valid, optionally nukes and
   # creates new certs if the repository variable ENABLE_NUKE_CERTS == 'true'
   # only run if a build is planned
@@ -171,7 +200,7 @@ jobs:
         (vars.SCHEDULED_SYNC != 'false' && needs.check_status.outputs.NEW_COMMITS == 'true' )
     steps:
       - name: Select Xcode version
-        run: "sudo xcode-select --switch /Applications/Xcode_27.0.app/Contents/Developer"
+        run: "sudo xcode-select --switch /Applications/Xcode_27.1.app/Contents/Developer"
 
       - name: Checkout Repo for building
         uses: actions/checkout@v5

.github/workflows/build_loop_auto.yml

@@ -1,17 +1,14 @@
-name: 4. Build Loop Auto 
-run-name: Build Loop Auto (${{ github.ref_name }})
+name: zzz Phasing Out
+run-name: Phasing Out (${{ github.ref_name }})
 on:
   workflow_dispatch:
-  schedule:
-    # Check for updates every Sunday
-    #   Later logic builds if there are updates or if it is the 2nd Sunday of the month
-    - cron: "33 7 * * 0" # Sunday at UTC 7:33
 
 env:
   GH_PAT: ${{ secrets.GH_PAT }}
   UPSTREAM_REPO: LoopKit/LoopWorkspace
   UPSTREAM_BRANCH: ${{ github.ref_name }} # branch on upstream repository to sync from (replace with specific branch name if needed)
   TARGET_BRANCH: ${{ github.ref_name }} # target branch on fork to be kept in sync
+  FASTLANE_SKIP_UPDATE_CHECK: true
 
 jobs:
   # use a single runner for these sequential steps
@@ -148,30 +145,6 @@ jobs:
             echo "is_second_instance=false" >> "$GITHUB_OUTPUT"
           fi
 
-  # When a scheduled run finds nothing new to build, cancel the run so it shows
-  # as "cancelled" instead of "success" — a green check should always mean a
-  # new build was made.
-  cancel_when_no_build:
-    needs: check_status
-    name: Cancel run when there is nothing to build
-    runs-on: ubuntu-26.04
-    permissions:
-      actions: write
-    if: |
-      github.event_name == 'schedule' &&
-        !(vars.SCHEDULED_BUILD != 'false' && needs.check_status.outputs.IS_SECOND_IN_MONTH == 'true') &&
-        !(vars.SCHEDULED_SYNC != 'false' && needs.check_status.outputs.NEW_COMMITS == 'true')
-    steps:
-      - name: Cancel the run
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          echo "Repository is up to date and no monthly build is due — cancelling this run so it is not reported as a successful build." >> "$GITHUB_STEP_SUMMARY"
-          gh run cancel ${{ github.run_id }} --repo ${{ github.repository }}
-          # Keep the job alive until the cancellation lands, so the run ends as
-          # "cancelled" rather than completing successfully first.
-          sleep 300
-
   # Checks if Distribution certificate is present and valid, optionally nukes and
   # creates new certs if the repository variable ENABLE_NUKE_CERTS == 'true'
   # only run if a build is planned
@@ -199,7 +172,7 @@ jobs:
         (vars.SCHEDULED_SYNC != 'false' && needs.check_status.outputs.NEW_COMMITS == 'true' )
     steps:
       - name: Select Xcode version
-        run: "sudo xcode-select --switch /Applications/Xcode_27.0.app/Contents/Developer"
+        run: "sudo xcode-select --switch /Applications/Xcode_27.1.app/Contents/Developer"
 
       - name: Checkout Repo for building
         uses: actions/checkout@v5

.github/workflows/create_certs.yml

@@ -11,6 +11,7 @@ env:
   FASTLANE_KEY_ID: ${{ secrets.FASTLANE_KEY_ID }}
   FASTLANE_ISSUER_ID: ${{ secrets.FASTLANE_ISSUER_ID }}
   FASTLANE_KEY: ${{ secrets.FASTLANE_KEY }}
+  FASTLANE_SKIP_UPDATE_CHECK: true
 
 jobs:
   validate:
@@ -52,9 +53,15 @@ jobs:
 
       # Create or update Distribution certificate and provisioning profiles
       - name: Check and create or update Distribution certificate and profiles if needed
+        id: certs
         run: |
           echo "Running Fastlane certs lane..."
-          bundle exec fastlane certs || true # ignore and continue on errors without annotating an exit code
+          # Continue on errors without annotating an exit code; set_output fails the job if no renewal follows
+          if bundle exec fastlane certs; then
+            echo "certs_failed=false" >> $GITHUB_OUTPUT
+          else
+            echo "certs_failed=true" >> $GITHUB_OUTPUT
+          fi
       - name: Check Distribution certificate and launch Nuke certificates if needed
         run: bundle exec fastlane check_and_renew_certificates
         id: check_certs
@@ -87,6 +94,11 @@ jobs:
           if [ "$FORCE_NUKE_CERTS" = "true" ]; then
             echo "::warning::‼️ Nuking of certificates was forced because the repository variable FORCE_NUKE_CERTS is set to 'true'."
           fi
+          # Fail if the certificate setup failed and no renewal will replace it
+          if [ "${{ steps.certs.outputs.certs_failed }}" = "true" ] && [ "$CERT_STATUS" != "true" ] && [ "$FORCE_NUKE_CERTS" != "true" ]; then
+            echo "::error::❌ Fastlane Match could not use the Distribution certificate in your Match-Secrets repository, and automated renewal will not run because another valid certificate exists. Delete https://github.com/${{ github.repository_owner }}/Match-Secrets and run action again: https://loopkit.github.io/loopdocs/browser/bb-errors/#delete-match-secrets"
+            exit 1
+          fi
   # Nuke Certs if needed, and if the repository variable ENABLE_NUKE_CERTS is set to 'true', or if FORCE_NUKE_CERTS is set to 'true', which will always force certs to be nuked
   nuke_certs:
       name: Nuke certificates

.github/workflows/validate_secrets.yml

@@ -2,6 +2,9 @@ name: 1. Validate Secrets
 run-name: Validate Secrets (${{ github.ref_name }})
 on: [workflow_call, workflow_dispatch]
 
+env:
+  FASTLANE_SKIP_UPDATE_CHECK: true
+
 jobs:
   validate-access-token:
     name: Access

VersionOverride.xcconfig

@@ -8,5 +8,5 @@
 
 // Version [for DIY Loop]
 //   configure the version number in LoopWorkspace
-LOOP_MARKETING_VERSION = 3.14.11
+LOOP_MARKETING_VERSION = 3.14.12
 CURRENT_PROJECT_VERSION = 57