Bump github.com/readium/swift-toolkit from 3.8.0 to 3.11.0

[dependabot]

Bumps github.com/readium/swift-toolkit from 3.8.0 to 3.11.0.

Release notes

Sourced from github.com/readium/swift-toolkit's releases.

3.11.0

[!WARNING] Minor releases (a.B.c) of the Readium toolkit may now include minor breaking changes, such as dependency upgrades or small API modifications. Major version numbers are reserved for significant architectural changes.

Documentation

• Versioned Documentation – Complete API reference on readium.org.
• Migration Guide – Instructions for upgrading from previous versions.

Changelog

Added

Navigator

• Added the AudioSessionManaging protocol, letting apps provide their own audio session manager instead of the built-in AudioSession (contributed by @​svenmeyers89).

LCP

• LCPService has a new addPassphrase(_:isHashed:userID:provider:) method to store a passphrase candidate in the repository without opening a license first. Useful to preload a passphrase ahead of time (e.g. from a catalog).
• LCPClient has a new getSupportedLCPProfileURIs() requirement, letting the toolkit report LCPError.licenseProfileNotSupported based on the profiles the embedded liblcp actually supports. Update your LCPClient facade to forward R2LCPClient.getSupportedLCPProfileURIs() (a default implementation is provided for backward compatibility).

Changed

LCP

• The auto-generated LCP device ID is now stored in the Keychain instead of UserDefaults, so it survives an app delete/reinstall and no longer needlessly consumes a license's device-registration slots. Existing IDs are automatically migrated from UserDefaults.

Fixed

Shared

• EPUB HREFs that are not percent-encoded but carry a fragment or query (e.g. chapter one.xhtml#section, with a space in the filename) now keep their #fragment/?query instead of encoding the separators into the path. This fixes table of contents and Media Overlays links failing to resolve and navigate in poorly-authored EPUBs.

Navigator

• Fixed custom EditingActions sometimes missing from the text-selection menu for double-tap (single word) selections (contributed by @​raphi011).
• Fixed memory leak in the AudioNavigator.
• #802 Fixed fonts declared with fontFamilyDeclarations never loading in the EPUB navigator. Font fetches were CORS-gated by WebKit (contributed by @​atani).

What's Changed

• Replace drafts.opds.io with specs.opds.io by @​mickael-menu with @​Copilot in readium/swift-toolkit#834
• Fix docs workflow root path resolution in generate-docs.sh by @​mickael-menu with @​Copilot in readium/swift-toolkit#835
• Fix Authentication for OPDS URL incorrectly pointing to specs.opds.io by @​mickael-menu with @​Copilot in readium/swift-toolkit#836
• Fix custom editing actions missing on double-tap selections (iOS 16+ buildMenu) by @​raphi011 in readium/swift-toolkit#822
• Add LCPService.addPassphrase() to preload passphrases by @​mickael-menu in readium/swift-toolkit#840
• Fix memory leak in the AudioNavigator by @​mickael-menu in readium/swift-toolkit#842
• Improve CI and release tooling by @​mickael-menu in readium/swift-toolkit#843

... (truncated)

Changelog

Sourced from github.com/readium/swift-toolkit's changelog.

Changelog

All notable changes to this project will be documented in this file. Take a look at the migration guide to upgrade between two major versions.

[3.11.0] - 2026-07-17

Added

Navigator

• Added the AudioSessionManaging protocol, letting apps provide their own audio session manager instead of the built-in AudioSession (contributed by @​svenmeyers89).

LCP

• LCPService has a new addPassphrase(_:isHashed:userID:provider:) method to store a passphrase candidate in the repository without opening a license first. Useful to preload a passphrase ahead of time (e.g. from a catalog).
• LCPClient has a new getSupportedLCPProfileURIs() requirement, letting the toolkit report LCPError.licenseProfileNotSupported based on the profiles the embedded liblcp actually supports. Update your LCPClient facade to forward R2LCPClient.getSupportedLCPProfileURIs() (a default implementation is provided for backward compatibility).

Changed

LCP

• The auto-generated LCP device ID is now stored in the Keychain instead of UserDefaults, so it survives an app delete/reinstall and no longer needlessly consumes a license's device-registration slots. Existing IDs are automatically migrated from UserDefaults.

Fixed

Shared

• EPUB HREFs that are not percent-encoded but carry a fragment or query (e.g. chapter one.xhtml#section, with a space in the filename) now keep their #fragment/?query instead of encoding the separators into the path. This fixes table of contents and Media Overlays links failing to resolve and navigate in poorly-authored EPUBs.

Navigator

• Fixed custom EditingActions sometimes missing from the text-selection menu for double-tap (single word) selections (contributed by @​raphi011).
• Fixed memory leak in the AudioNavigator.
• #802 Fixed fonts declared with fontFamilyDeclarations never loading in the EPUB navigator. Font fetches were CORS-gated by WebKit (contributed by @​atani).

[3.10.0] - 2026-06-24

Changed

LCP

• LCPPassphraseRepository.addPassphrase(_:userID:provider:) no longer takes a license ID, and provider is now optional. A convenience addPassphrase(_:) overload is available for storing a passphrase without any associated user or provider.

Fixed

Shared

... (truncated)

Commits

• d82f44f 3.11.0 (#862)
• afccc37 Store the auto-generated LCP device ID in the Keychain (#858)
• f123eef Allow external Audio Session handling (#856)
• 0da00e8 Improve LCP profiles detection (#857)
• 8811f0e Fix poorly-authored EPUB links not navigating (#847)
• e43a052 Fix fonts declared with fontFamilyDeclarations never loading (#845)
• 6f943d4 Improve CI and release tooling (#843)
• eee5d52 Fix memory leak in the AudioNavigator (#842)
• aa00f91 Add LCPService.addPassphrase() to preload passphrases (#840)
• 489169a Fix custom editing actions missing on double-tap selections (#822)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)