[dependabot]

Bumps github.com/google/googlesignin-ios from 10.0.0 to 10.1.0.

Release notes

Sourced from github.com/google/googlesignin-ios's releases.

GoogleSignIn-iOS 10.1.0

10.1.0

• DEPRECATE COCOAPODS DISTRIBUTION FOR NEW RELEASES. This is the last release published to CocoaPods, which becomes read-only on December 2, 2026 - migrate to Swift Package Manager using https://github.com/google/GoogleSignIn-iOS/blob/HEAD/MIGRATING_FROM_COCOAPODS.md. (#656)
• Support AppCheckCore 12.x, so apps using Swift Package Manager can now upgrade to Firebase 13 (the podspec also accepts AppCheckCore 11.x or 12.x). With AppCheckCore 11.x, a custom App Check provider that returns neither a token nor an error now counts as success, and a failed App Check preparation is no longer reported as successful. (#626)
• Fix concurrency issues in GIDGoogleUser:
  • Key-value observers of accessToken, refreshToken, idToken and profile are now notified whenever any of them changes, so they never see a half-updated user (profile previously sent no notifications). configuration is now fixed when the user is created, instead of possibly reflecting a later token update. (#651)
  • Key-value observers are now notified while GIDGoogleUser holds its internal lock. Calling back into the same user is fine, but an observer must not synchronously wait (e.g. with dispatch_sync) on another thread that is updating that user. (#652)
  • grantedScopes and accessToken no longer revert to their pre-add-scopes values when a token refresh was in flight while scopes were added. (#653)
  • Readers no longer see a mix of old and new tokens during a concurrent update. (#645)
• Fix a custom nonce and requested claims being dropped when a sign-in is continued after a Device Policy app restart. (#637)
• Fix EMM remediation dialogs being suppressed for the rest of the app's lifetime after an error arrived with no key window, and EMM errors sometimes being reported as kGIDSignInErrorCodeUnknown or the underlying OAuth error instead of kGIDSignInErrorCodeEMM. (#642)
• Fix a crash when a server error response carries a non-string value under its error key. (#638)
• Internal
  • Replace the NSBundle swizzle in tests with an injected GIDBundle seam (#658)
  • Warm up simulator runtimes before iOS simulator CI jobs (#657)
  • Run unit tests under Thread Sanitizer for iOS (#644)
  • Simplify EMM tests (#641)
  • Update push and PR notifications to use Cards v2 (#636)

Commits

• bfaebbc Prepare for 10.1.0 Release (#661)
• 5140b1e Replace the NSBundle swizzle with an injected GIDBundle seam (#658)
• 56d4ddc Add Cocoapods Deprecation Notice + Migration Guide (#656)
• 69266fd Warm up simulator runtimes before iOS simulator CI jobs (#657)
• cd6d9ec Drop token refresh responses for a replaced authorization (#653)
• a49a465 Replace @​synchronized(self) in GIDGoogleUser with a private lock (#652)
• 86fc6fa Move granted scopes, configuration and profile into the snapshot (#651)
• 4ce331c [App Check] Add SPM AppCheckCore 12.x support (#626)
• 603ef45 Fix inconsistent EMM error handling (#642)
• 2b92451 Publish GIDGoogleUser's tokens as immutable snapshots (#645)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)