Bump github.com/readium/swift-toolkit from 3.8.0 to 3.10.0

[dependabot]

Bumps github.com/readium/swift-toolkit from 3.8.0 to 3.10.0.

Release notes

Sourced from github.com/readium/swift-toolkit's releases.

3.10.0

[!WARNING] Minor releases (a.B.c) of the Readium toolkit may now include minor breaking changes, such as dependency upgrades or small API modifications. Major version numbers are reserved for significant architectural changes.

Documentation

• Versioned Documentation – Complete API reference on readium.org.
• Migration Guide – Instructions for upgrading from previous versions.

Changelog

Changed

LCP

• LCPPassphraseRepository.addPassphrase(_:userID:provider:) no longer takes a license ID, and provider is now optional. A convenience addPassphrase(_:) overload is available for storing a passphrase without any associated user or provider.

Fixed

Shared

• ZIP entry names stored with a leading slash (e.g. /001.jpg, found in some CBZ comics) are now normalized to relative paths. Previously such entries resolved as absolute-path references against the base URL, causing them to fail.

Navigator

• Fixed EPUB footnotes never being detected when tapped, which prevented EPUBNavigatorDelegate.navigator(_:shouldNavigateToNoteAt:content:referrer:) from being called and made footnote references navigate to the note's location instead of being handled by the host (contributed by @​raphi011).

LCP

• #818 Repository failures during passphrase lookup (e.g. Keychain access errors) now fall through gracefully to the interactive authentication flow instead of propagating the error.

What's Changed

• Add release scripts by @​mickael-menu in readium/swift-toolkit#796
• Fix leading-slash ZIP entry names breaking ZIP-based publications by @​raphi011 in readium/swift-toolkit#809
• Upgrade Swift and JS dependencies by @​mickael-menu in readium/swift-toolkit#815
• Fix EPUB footnotes not being detected when tapped by @​raphi011 in readium/swift-toolkit#821
• Add LCP passphrase without a license ID or provider by @​mickael-menu in readium/swift-toolkit#824
• 3.10.0 by @​mickael-menu in readium/swift-toolkit#825

New Contributors

• @​raphi011 made their first contribution in readium/swift-toolkit#809

Full Changelog: readium/swift-toolkit@3.9.0...3.10.0

3.9.0

[!WARNING] Minor releases (a.B.c) of the Readium toolkit may now include minor breaking changes, such as dependency upgrades or small API modifications. Major version numbers are reserved for significant architectural changes.

... (truncated)

Changelog

Sourced from github.com/readium/swift-toolkit's changelog.

Changelog

All notable changes to this project will be documented in this file. Take a look at the migration guide to upgrade between two major versions.

[Unreleased]

Fixed

Navigator

• Fixed custom EditingActions sometimes missing from the text-selection menu for double-tap (single word) selections (contributed by @​raphi011).

[3.10.0] - 2026-06-24

Changed

LCP

• LCPPassphraseRepository.addPassphrase(_:userID:provider:) no longer takes a license ID, and provider is now optional. A convenience addPassphrase(_:) overload is available for storing a passphrase without any associated user or provider.

Fixed

Shared

• ZIP entry names stored with a leading slash (e.g. /001.jpg, found in some CBZ comics) are now normalized to relative paths. Previously such entries resolved as absolute-path references against the base URL, causing them to fail.

Navigator

• Fixed EPUB footnotes never being detected when tapped, which prevented EPUBNavigatorDelegate.navigator(_:shouldNavigateToNoteAt:content:referrer:) from being called and made footnote references navigate to the note's location instead of being handled by the host (contributed by @​raphi011).

LCP

• #818 Repository failures during passphrase lookup (e.g. Keychain access errors) now fall through gracefully to the interactive authentication flow instead of propagating the error.

[3.9.0] - 2026-05-12

Added

Playground

• New Playground iOS app – a minimal SwiftUI sample demonstrating how to use the Readium Swift Toolkit and to test its API.
  • Recipes/ contains self-contained and explained code you can reuse in your own application.
  • App/ folder contains the scaffolding (file management, navigation, error handling) needed to run the Playground.

Shared

• Added support for SVG covers in ResourceCoverService. SVG images can now be used as publication covers and are rendered to bitmaps (contributed by @​grighakobian).
• Publication has a new experimental coverData(accepting:) API that returns the raw bytes and media type of the cover, useful for storing the original cover without re-encoding.

... (truncated)

Commits

• ec5f552 3.10.0 (#825)
• 7346621 Add LCP passphrase without a license ID or provider (#824)
• bb44355 Fix EPUB footnotes not being detected when tapped (#821)
• 25806f9 Upgrade Swift and JS dependencies (#815)
• ec6795f Fix leading-slash ZIP entry names breaking ZIP-based publications (#809)
• 5447aaf Add release scripts (#796)
• de07026 3.9.0 (#795)
• 64073d9 Fix crashes in TransformingResource and LCPDecryptor (#794)
• 7238055 Add PDF content iterator for text extraction and search (#792)
• 67624e6 Add ContentSearchService with cross-element matching using the Content API ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)