Update GoogleToolboxForMac

[emmaB93]

The library is using GoogleToolboxForMac, correct?

Could you please use the latest version which includes the missing privacy infos?
I'm currently getting the following message:

Descriptions for the following required API reason(s) may be missing: 1
[0] NSPrivacyAccessedAPICategoryUserDefaults

While analyzing my project I'm getting the following warnings:

If the directory you are analyzing is the app project directory, your app's privacy manifest may be affected by these analysis results: 3 [0] NSPrivacyAccessedAPICategoryFileTimestamp:stat,NSURLContentModificationDateKey:/App/Pods/MLKitCommon/Frameworks/MLKitCommon.framework/MLKitCommon [1] NSPrivacyAccessedAPICategoryDiskSpace:NSFileSystemFreeSize:/App/Pods/MLKitCommon/Frameworks/MLKitCommon.framework/MLKitCommon [2] NSPrivacyAccessedAPICategoryUserDefaults:NSUserDefaults:/App/Pods/MLKitCommon/Frameworks/MLKitCommon.framework/MLKitCommon

I'm not 100% sure if this is caused by the capacitor plugin? (I use the latest version "@capacitor-mlkit/barcode-scanning": "6.1.0")
Thanks for helping!

[robingenz]

We already use the latest version of the GoogleMLKit/BarcodeScanning, see:

capacitor-mlkit/packages/barcode-scanning/ios/Podfile

Line 12 in 9190bc8

pod 'GoogleMLKit/BarcodeScanning', '5.0.0'

Here you can find a list of the latest versions: https://developers.google.com/ml-kit/release-notes

EDIT: I was wrong. We are not yet using the latest version, see #179.

[rye-welz-geselowitz]

I am also struggling with the missing privacy manifest, and would love advice!

Upon submission to the App Store, I received the following warning from App Store Connect:

Missing privacy manifest - Your app includes “Frameworks/GoogleToolboxForMac.framework/GoogleToolboxForMac”, which includes GoogleToolboxForMac, an SDK that was identified in the documentation as a privacy-impacting third-party SDK.

I am also using @capacitor-mlkit/barcode-scanning 6.1.0. I understand from my Podfile.lock that GoogleToolboxForMac is included in my project through CapacitorMlkitBarcodeScanning [1] .

I understand that capacitor-mlkit/barcode-scanning is using the latest version of GoogleMLKit/BarcodeScanning, so there's nothing the capacitor-mlkit/barcode-scanning maintainers need to change.

But my questions are:

1. Is my summary of the situation correct?: capacitor-mlkit/barcode-scanning uses the latest version of GoogleMLKit/BarcodeScanning, but GoogleMLKit/BarcodeScanning includes (several layers down) a dependency on a version of GoogleToolboxForMac that does not include the required privacy manifest.
2. What steps (if any) can I take to decrease the likelihood of my iOS app, which relies on capacitor-mlkit/barcode-scanning, being rejected from the App Store on this basis?

I love this plugin and I want to make sure I can continue using it! Apologies if this is the wrong place for these questions, please feel free to direct me elsewhere. :)

---

[1]

PODS:
  - AparajitaCapacitorSecureStorage (6.0.1):
    - Capacitor
    - KeychainSwift (~> 21.0)
  - Capacitor (6.1.1):
    - CapacitorCordova
  - CapacitorApp (6.0.1):
    - Capacitor
  - CapacitorCommunitySqlite (6.0.1):
    - Capacitor
    - SQLCipher
    - ZIPFoundation
  - CapacitorCordova (6.1.1)
  - CapacitorDevice (6.0.0):
    - Capacitor
  - CapacitorLiveUpdates (0.3.1):
    - Capacitor
    - IonicLiveUpdates (~> 0.5.4)
  - CapacitorMlkitBarcodeScanning (6.1.0):
    - Capacitor
    - GoogleMLKit/BarcodeScanning (= 5.0.0)
  - CapacitorNetwork (6.0.1):
    - Capacitor
  - CapacitorPreferences (6.0.1):
    - Capacitor
  - CapacitorSplashScreen (6.0.2):
    - Capacitor
  - GoogleDataTransport (9.4.1):
    - GoogleUtilities/Environment (~> 7.7)
    - nanopb (< 2.30911.0, >= 2.30908.0)
    - PromisesObjC (< 3.0, >= 1.2)
  - GoogleMLKit/BarcodeScanning (5.0.0):
    - GoogleMLKit/MLKitCore
    - MLKitBarcodeScanning (~> 4.0.0)
  - GoogleMLKit/MLKitCore (5.0.0):
    - MLKitCommon (~> 10.0.0)
  - GoogleToolboxForMac/DebugUtils (2.3.2):
    - GoogleToolboxForMac/Defines (= 2.3.2)
  - GoogleToolboxForMac/Defines (2.3.2)
  - GoogleToolboxForMac/Logger (2.3.2):
    - GoogleToolboxForMac/Defines (= 2.3.2)
  - "GoogleToolboxForMac/NSData+zlib (2.3.2)":
    - GoogleToolboxForMac/Defines (= 2.3.2)
  - "GoogleToolboxForMac/NSDictionary+URLArguments (2.3.2)":
    - GoogleToolboxForMac/DebugUtils (= 2.3.2)
    - GoogleToolboxForMac/Defines (= 2.3.2)
    - "GoogleToolboxForMac/NSString+URLArguments (= 2.3.2)"
  - "GoogleToolboxForMac/NSString+URLArguments (2.3.2)"
  - GoogleUtilities/Environment (7.13.3):
    - GoogleUtilities/Privacy
    - PromisesObjC (< 3.0, >= 1.2)
  - GoogleUtilities/Logger (7.13.3):
    - GoogleUtilities/Environment
    - GoogleUtilities/Privacy
  - GoogleUtilities/Privacy (7.13.3)
  - GoogleUtilities/UserDefaults (7.13.3):
    - GoogleUtilities/Logger
    - GoogleUtilities/Privacy
  - GoogleUtilitiesComponents (1.1.0):
    - GoogleUtilities/Logger
  - GTMSessionFetcher/Core (3.5.0)
  - IonicLiveUpdates (0.5.5)
  - KeychainSwift (21.0.0)
  - MLImage (1.0.0-beta5)
  - MLKitBarcodeScanning (4.0.0):
    - MLKitCommon (~> 10.0)
    - MLKitVision (~> 6.0)
  - MLKitCommon (10.0.0):
    - GoogleDataTransport (~> 9.0)
    - GoogleToolboxForMac/Logger (~> 2.1)
    - "GoogleToolboxForMac/NSData+zlib (~> 2.1)"
    - "GoogleToolboxForMac/NSDictionary+URLArguments (~> 2.1)"
    - GoogleUtilities/UserDefaults (~> 7.0)
    - GoogleUtilitiesComponents (~> 1.0)
    - GTMSessionFetcher/Core (< 4.0, >= 1.1)
  - MLKitVision (6.0.0):
    - GoogleToolboxForMac/Logger (~> 2.1)
    - "GoogleToolboxForMac/NSData+zlib (~> 2.1)"
    - GTMSessionFetcher/Core (< 4.0, >= 1.1)
    - MLImage (= 1.0.0-beta5)
    - MLKitCommon (~> 10.0)
  - nanopb (2.30910.0):
    - nanopb/decode (= 2.30910.0)
    - nanopb/encode (= 2.30910.0)
  - nanopb/decode (2.30910.0)
  - nanopb/encode (2.30910.0)
  - PromisesObjC (2.4.0)
  - SQLCipher (4.6.1):
    - SQLCipher/standard (= 4.6.1)
  - SQLCipher/common (4.6.1)
  - SQLCipher/standard (4.6.1):
    - SQLCipher/common
  - ZIPFoundation (0.9.19)

[robingenz]

No, I was wrong. We are not yet using the latest version, see #179.

[rye-welz-geselowitz]

Awesome, thanks for letting me know!