avoid using deprecated camera device type constants on recent macos versions
What changed, and why it matters
This commit updates a single camera-library dependency version in the project's build file. The stated reason is to stop using deprecated macOS camera device type constants, which could otherwise cause camera-related features to break on newer Macs. There is no direct evidence in the commit of a security vulnerability being fixed.
Treat as a routine maintenance update. If evaluating security risk, check the upstream openpnp-capture-java release notes between 0.0.28-6 and 0.0.28-9 for any security fixes, but this commit itself does not demonstrate one.
Security signals we found
Dependency version bump only
Commit message cites deprecated macOS API compatibility, not security
No CVE, advisory, or security disclosure referenced in commit
No code-level security fix visible in diff
Evidence from the diff
The change bumps org.openpnp:openpnp-capture-java from 0.0.28-6 to 0.0.28-9 in build.gradle. The commit message frames this as avoiding deprecated AVFoundation camera device type constants on recent macOS versions. This is a routine compatibility/maintenance dependency update. The diff does not show any security-relevant code change, CVE reference, or patch to Sparrow’s own source.
Changed components
build.gradle dependency declarationorg.openpnp:openpnp-capture-java library (camera capture)Inspect captured patch +1 / −1
diff --git a/build.gradle b/build.gradle
index 32fd39b..404ddc7 100644
--- a/build.gradle
+++ b/build.gradle
@@ -73,7 +73,7 @@ dependencies {
implementation('com.fasterxml.jackson.core:jackson-databind:2.17.2')
implementation('com.sparrowwallet:hummingbird:1.7.4')
implementation('co.nstant.in:cbor:0.9')
- implementation('org.openpnp:openpnp-capture-java:0.0.28-6')
+ implementation('org.openpnp:openpnp-capture-java:0.0.28-9')
implementation("io.matthewnelson.kmp-tor:runtime:2.2.1")
implementation("io.matthewnelson.kmp-tor:resource-exec-tor-gpl:408.16.3")
implementation('org.jetbrains.kotlinx:kotlinx-coroutines-javafx:1.10.1') {
Why this scored 18/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.