Sparkle 2.6.4

This fixes a security vulnerability in Sparkle that allows an attacker
to replace an existing signed update with another payload. The security
fix is also backported to Sparkle 1.27.3 which is updated as well, as
MacVim legacy builds (macOS 10.9 - 10.12) still use Sparkle 1.

Sparkle 2.6.4 also contains misc macOS 14 Sonoma improvements, better
signing error logging, and Norwegian locale.

Author: ychin

src/MacVim/Sparkle_1.framework/Versions/A/PrivateHeaders/SUUnarchiver.h

@@ -14,7 +14,7 @@ NS_ASSUME_NONNULL_BEGIN
 
 @interface SUUnarchiver : NSObject
 
-+ (nullable id <SUUnarchiverProtocol>)unarchiverForPath:(NSString *)path updatingHostBundlePath:(nullable NSString *)hostPath decryptionPassword:(nullable NSString *)decryptionPassword;
++ (nullable id <SUUnarchiverProtocol>)unarchiverForPath:(NSString *)path extractionDirectory:(NSString *)extractionDirectory updatingHostBundlePath:(nullable NSString *)hostPath decryptionPassword:(nullable NSString *)decryptionPassword;
 
 @end
 

src/MacVim/Sparkle_1.framework/Versions/A/Resources/Autoupdate.app/Contents/Info.plist

@@ -3,7 +3,7 @@
 <plist version="1.0">
 <dict>
 	<key>BuildMachineOSBuild</key>
-	<string>20G224</string>
+	<string>20G1427</string>
 	<key>CFBundleDevelopmentRegion</key>
 	<string>English</string>
 	<key>CFBundleExecutable</key>
@@ -17,15 +17,15 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>1.27.1</string>
+	<string>1.27.3</string>
 	<key>CFBundleSignature</key>
 	<string>????</string>
 	<key>CFBundleSupportedPlatforms</key>
 	<array>
 		<string>MacOSX</string>
 	</array>
 	<key>CFBundleVersion</key>
-	<string>1.106</string>
+	<string>1.108</string>
 	<key>DTCompiler</key>
 	<string>com.apple.compilers.llvm.clang.1_0</string>
 	<key>DTPlatformBuild</key>

src/MacVim/Sparkle_1.framework/Versions/A/Resources/Autoupdate.app/Contents/MacOS/Autoupdate

@@ -14,7 +14,7 @@
 		</data>
 		<key>Resources/SUStatus.nib/keyedobjects-101300.nib</key>
 		<data>
-		CIAIcdXrd5aOBmKYYDM7NGmuxGA=
+		SiFXlXTmWast/yQTJlQK/gow9KA=
 		</data>
 		<key>Resources/SUStatus.nib/keyedobjects.nib</key>
 		<data>
@@ -306,10 +306,10 @@
 		<dict>
 			<key>cdhash</key>
 			<data>
-			lxj3mKIQ39AVZEK38pWMaPSGxUs=
+			jcgrdSsUMQkioU+tnNnArvH9zhI=
 			</data>
 			<key>requirement</key>
-			<string>cdhash H"e3eb91f77d0b03312e38c12fa726c22d3d36648e" or cdhash H"9718f798a210dfd0156442b7f2958c68f486c54b" or cdhash H"3041d686c9337dbc22180e5a50a1619b4300b495" or cdhash H"73d14270b04c7bd6598431fd41162ed85684fb94"</string>
+			<string>cdhash H"31003bffc16925050e7b3eec5a71e47aea92b6bb" or cdhash H"8dc82b752b14310922a14fad9cd9c0aef1fdce12" or cdhash H"7cde26d750c3500632450bbf9fc399e9505d6d77" or cdhash H"ed209ddb228af02e920489579656ecb9bcd8f2a6"</string>
 		</dict>
 		<key>Resources/AppIcon.icns</key>
 		<dict>
@@ -337,11 +337,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			CIAIcdXrd5aOBmKYYDM7NGmuxGA=
+			SiFXlXTmWast/yQTJlQK/gow9KA=
 			</data>
 			<key>hash2</key>
 			<data>
-			zQHRg9w5HHkCzf82YkWsfd9mPEYj66NGhFY/cgUMYfQ=
+			QBTzPQLOP3aTBwOvzRY3uQufCdu8zbfov3VSHe17clo=
 			</data>
 		</dict>
 		<key>Resources/SUStatus.nib/keyedobjects.nib</key>