build(deps): bump github.com/sparkle-project/sparkle from 2.9.0 to 2.9.4

[dependabot]

Bumps github.com/sparkle-project/sparkle from 2.9.0 to 2.9.4.

Release notes

Sourced from github.com/sparkle-project/sparkle's releases.

2.9.4 Appcast Improvements

Changes:

• Fix backgrounded apps sometimes not bringing windows from user initiated actions in active focus (#2890) (Zorg, wojciech-kulik)

This release contains an activation fix for backgrounded / dockless applications using Sparkle's standard user interface.

Please also check 2.9.3, 2.9.2, 2.9.1, and 2.9.0 for previous changes.

2.9.3 Appcast Improvements

Changes:

• Fix updating not working the first time if the app's bundle ID ends with ".app" (#2882) (Zorg)

This release contains a very specific installation fix for apps that use a bundle identifier ending with .app

Please also check 2.9.2, 2.9.1, and 2.9.0 for previous changes.

2.9.2 Appcast Improvements

Changes:

• Show hidden window title in update window for accessibility (#2871) (Zorg)
• Polish and update Spanish translations to be gender neutral (#2874, #2875) (Emilio P Egido)
• Guard against NULL CFRelease() on failure condition in fallback path (#2867) (Zorg)
• Guard against symlinks when applying delta update files (fe7b718) (Zorg, fg0x0)
• Enforce connection to installer to be validated before receiving appcast item data (#2876, #2877) (Zorg, fg0x0)

This release contains two high-complex security fixes reported by @​fg0x0. The details will be posted in the 2.9 discussion.

Please also check 2.9.1 and 2.9.0 for previous changes.

2.9.1 Appcast Improvements

Changes:

• Fix potential crash due to race condition within clearDownloadedUpdate (#2863) (Julian Pscheid)
• Fix generate_appcast failing if feed URL doesn't have lastPathComponent (#2862) (Julian Pscheid)
• Don't let progress status text title string line wrap (#2856) (Zorg)
• Add minimal framework support for building arm64e (#2858, #2860) (Zorg)
• Add SKIP_INSTALL=YES to for XPCServices targets (#2864) (Jeremy Huddleston Sequoia)

Please also check 2.9.0 for previous changes.

Changelog

Sourced from github.com/sparkle-project/sparkle's changelog.

2.9.4

• Fix backgrounded apps sometimes not bringing windows from user initiated actions in active focus (#2890) (Zorg, wojciech-kulik)

2.9.3

• Fix updating not working the first time if the app's bundle ID ends with ".app" (#2882) (Zorg)

2.9.2

• Show hidden window title in update window for accessibility (#2871) (Zorg)
• Polish and update Spanish translations to be gender neutral (#2874, #2875) (Emilio P Egido)
• Guard against NULL CFRelease() on failure condition in fallback path (#2867) (Zorg)
• Guard against symlinks when applying delta update files (fe7b718) (Zorg, fg0x0)
• Enforce connection to installer to be validated before receiving appcast item data (#2876, #2877) (Zorg, fg0x0)

2.9.1

• Fix potential crash due to race condition within clearDownloadedUpdate (#2863) (Julian Pscheid)
• Fix generate_appcast failing if feed URL doesn't have lastPathComponent (#2862) (Julian Pscheid)
• Don't let progress status text title string line wrap (#2856) (Zorg)
• Add minimal framework support for building arm64e (#2858, #2860) (Zorg)
• Add SKIP_INSTALL=YES to for XPCServices targets (#2864) (Jeremy Huddleston Sequoia)

Commits

• b6496a7 Update Package management files for version 2.9.4
• 4ba9745 Update CHANGELOG for version 2.9.4
• 1ec540d Use activateIgnoringOtherApps: again for backgrounded apps (#2890)
• d46d456 Update Package management files for version 2.9.3
• 00e7c24 Update CHANGELOG for version 2.9.3
• e6a344a Fix updating not working the first time if bundle ID ends with ".app" (#2882)
• 6276ba2 Update Package management files for version 2.9.2
• 113279a Improve synchronization of _receivedAppcastItemData (#2877)
• 7c4741d Update Package management files for version 2.9.2
• 5df807d Update README for 2.9.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)