Bump github.com/sparkle-project/sparkle from 2.4.0 to 2.9.2 in /Core

[dependabot]

Bumps github.com/sparkle-project/sparkle from 2.4.0 to 2.9.2.

Release notes

Sourced from github.com/sparkle-project/sparkle's releases.

2.9.2 Appcast Improvements

Changes:

• Show hidden window title in update window for accessibility (#2871) (Zorg)
• Polish and update Spanish translations to be gender neutral (#2874, #2875) (Emilio P Egido)
• Guard against NULL CFRelease() on failure condition in fallback path (#2867) (Zorg)
• Guard against symlinks when applying delta update files (fe7b718) (Zorg, fg0x0)
• Enforce connection to installer to be validated before receiving appcast item data (#2876, #2877) (Zorg, fg0x0)

This release contains two high-complex security fixes reported by @​fg0x0. The details will be posted in the 2.9 discussion.

Please also check 2.9.1 and 2.9.0 for previous changes.

2.9.1 Appcast Improvements

Changes:

• Fix potential crash due to race condition within clearDownloadedUpdate (#2863) (Julian Pscheid)
• Fix generate_appcast failing if feed URL doesn't have lastPathComponent (#2862) (Julian Pscheid)
• Don't let progress status text title string line wrap (#2856) (Zorg)
• Add minimal framework support for building arm64e (#2858, #2860) (Zorg)
• Add SKIP_INSTALL=YES to for XPCServices targets (#2864) (Jeremy Huddleston Sequoia)

Please also check 2.9.0 for previous changes.

2.9.0 Appcast Improvements

Changes:

• Add basic markdown support for release notes (requires macOS 12+) including customizing its presentation (#2810, #2817) (Zorg)
• Add support for signing and verifying appcast feeds (#2822, #2828) (Zorg)
• Add sparkle:hardwareRequirements for enforcing an Apple silicon (arm64) requirement (#2797) (Zorg)
• Add sparkle:minimumUpdateVersion for specifying a minimum version an app needs to be on before upgrading (#2811) (Zorg)
• Add API annotations for Swift concurrency (#2827) (Zorg)
• Validate Obj-C class when reading objects from user defaults / Info plists (#2782) (Zorg)
• Download temporary files in-memory using NSURLSessionDataTask (#2825) (Zorg)
• Allow impatient update check interval to be configured for updates that are downloaded automatically (#2799) (Zorg)
• Probe agent & status service as soon as we launch it to reduce timeout issues (#2852) (Zorg)
• Add allowsAutomaticUpdates property to determine if automatic downloading/installing of updates option should be enabled (#2809) (Zorg)
• Add Vietnamese translation (#2816, #2839) (TranPhuong319)
• Add missing nn language to Installer progress Info.plist (#2818) (Zorg)
• Improve German localization (#2847) (Marco Hillger)
• Find non-canonical Sparkle.framework locations in generate_appcast when creating delta updates to determine compatibility (#2833) (Zorg)
• Make Debug builds of Sparkle use same time interval settings as Release (#2805) (Zorg)
• Remove sparkle-cli from the binary distribution (#2826) (Zorg)
• Make generate_appcast deltas order stable and thread-safe (#2848) (Nathan Manceaux-Panot)
• Fix Xcode 26.4 beta compiler warnings (#2850) (Zorg)

This release adds appcast enhancements such as markdown support and signed feeds.

CocoaPods distribution is now deprecated. Please consider migrating away.

... (truncated)

Commits

• 6276ba2 Update Package management files for version 2.9.2
• 113279a Improve synchronization of _receivedAppcastItemData (#2877)
• 7c4741d Update Package management files for version 2.9.2
• 5df807d Update README for 2.9.2
• c6ab245 Update Package management files for version 2.9.2
• 6e370a5 Enforce connection to installer to be validated before receiving appcast item...
• cbdc150 Polish Spanish localization in Sparkle.strings (#2875)
• fe7b718 Merge commit from fork
• d2b796b Update you're up to date Spanish translation to be gender neutral (#2874)
• 2f33f56 Fix QoS warning when running Test app server on main thread (#2873)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.