Release 1.3.0

.github/CONTRIBUTING.md

@@ -11,6 +11,7 @@
 - [Developer Certificate of Origin](#developer-certificate-of-origin)
 - [Review Workflow](#review-workflow)
 - [LLMs, GitHub bot accounts, and AI agents](#llms-github-bot-accounts-and-ai-agents)
+- [Guidance Regarding Use of Generative AI](#guidance-regarding-use-of-generative-ai)
 - [License](#license)
 
 Looking to contribute something OUDS iOS? **Here's how you can help.**
@@ -322,6 +323,20 @@ For example, if you use GPT-4o-mini LLM with GitHub Copilot:
 Assisted-by: GPT-4o-mini (GitHub Copilot)
 ```
 
+## Guidance Regarding Use of Generative AI
+
+Open source software has thrived for decades based on the merits of each technical contribution that is openly contributed to and reviewed by community peers. 
+Development and review of code generated by AI tools should be treated no differently.
+
+Code or other content generated in whole or in part using AI tools can be contributed to the project.
+However, there are some unique considerations related to AI generated content that developers should factor into their contributions. 
+
+1. Contributors should ensure that the terms and conditions of the generative AI tool do not place any contractual restrictions on how the tool’s output can be used that are inconsistent with the project’s open source software license, the project’s intellectual property policies, or the Open Source Definition. 
+
+2. If any pre-existing copyrighted materials (including pre-existing open source code) authored or owned by third parties are included in the AI tool’s output, prior to contributing such output to the project, the Contributor should confirm that they have have permission from the third party owners–such as the form of an open source license or public domain declaration that complies with the project’s licensing policies–to use and modify such pre-existing materials and contribute them to the project. Additionally, the contributor should provide notice and attribution of such third party rights, along with information about the applicable license terms, with their contribution.
+
+This is based on [the Linux Foundation Guidance Regarding Use of Generative AI Tools for Open Source Software Development](https://www.linuxfoundation.org/legal/generative-ai).
+
 ## License
 
 > [!IMPORTANT]

.github/DEVELOP.md

@@ -81,7 +81,7 @@ brew install git-cliff
 # For Syft (at least 1.26.1)
 brew install syft
 
-# For Grype (at least 0.96.0)
+# For Grype (at least 0.110.0)
 brew tap anchore/grype
 brew install grype
 ```

.github/RESPONSIBILITIES.md

@@ -2,27 +2,17 @@
 - [Current Maintainers](#current-maintainers)
 - [Maintainer Responsibilities](#maintainer-responsibilities)
   - [Uphold Code of Conduct](#uphold-code-of-conduct)
-  - [Prioritize Security](#prioritize-security)
   - [Review Pull Requests](#review-pull-requests)
   - [Triage Open Issues](#triage-open-issues)
     - [Automatically Label Issues](#automatically-label-issues)
   - [Be Responsive](#be-responsive)
   - [Maintain Overall Health of the Repo](#maintain-overall-health-of-the-repo)
     - [Keep Dependencies up to Date](#keep-dependencies-up-to-date)
-  - [Manage Roadmap](#manage-roadmap)
-  - [Add Continuous Integration Checks](#add-continuous-integration-checks)
   - [Use Semver](#use-semver)
   - [Release Frequently](#release-frequently)
   - [Promote Other Maintainers](#promote-other-maintainers)
   - [Describe the Repo](#describe-the-repo)
 - [Becoming a Maintainer](#becoming-a-maintainer)
-  - [Nomination](#nomination)
-  - [Interest](#interest)
-  - [Addition](#addition)
-- [Removing a Maintainer](#removing-a-maintainer)
-  - [Moving On](#moving-on)
-  - [Inactivity](#inactivity)
-  - [Negative Impact on the Project](#negative-impact-on-the-project)
 
 ## Overview
 

.github/SECURITY.md

@@ -1,9 +1,12 @@
 # Security Policy
 
-# Reporting Security Issues
+## Reporting Security Issues
 
 We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions.
-Send an e-mail to [opensource.contact@orange.com](mailto:opensource.contact@orange.com) to report a vulnerability and contact all people in CONTRIBUTORS and MAINTAINERS including the word "SECURITY" in the subject line.
+To report a vulnerability, send an e-mail to **both**:
+- [opensource.contact@orange.com](mailto:opensource.contact@orange.com)
+- and [cert.cc@orange.com](mailto:cert.cc@orange.com)
+- and all people in MAINTAINERS including the word "SECURITY" in the subject line
 
 Please allow our team sufficient time to resolve the vulnerability before disclosing it ; we'll remain in contact about the fix and may ask for your assistance to verify it is resolved.
 

.github/copilot-instructions.md

@@ -0,0 +1,294 @@
+# OUDS iOS - GitHub Copilot Instructions
+
+This file provides guidance to GitHub Copilot when working on this repository.
+It covers contributor and maintainer guidelines: code formatting, architecture, build process, best practices, ecodesign, accessibility, development requirements, build commands and review guidelines.
+
+## 1. Code formatting
+
+The source code is formatted for Swift 6.2. Configuration of formatter is in `.swiftformat` and linter in `.swiftlint`.
+
+## 2. Architecture details
+
+The Swift Package contains several products or targets exposing API in separated dependencies.
+
+### 2.1 Modules
+
+Here are the modules of the Swift Package, i.e. set of features with external dependencies.
+
+#### Core / Components
+
+Here the the components provided by the Swift Package like buttons, switchs, checkboxes, chips, tags, links, etc.
+
+#### Core / Themes / Orange
+
+Here is the definition of the Orange theme for all Orange products.
+
+#### Core / Themes / Orange Compact
+
+Here is the definition of the Orange theme for all Orange products but with constraints of spaces and sizes.
+
+#### Core / Themes / Sosh
+
+Here is the definition of the Sosh theme for all Sosh products.
+
+#### Core / Themes / Wireframe
+
+Here is the definition of the Wireframe theme for prototyping and mockups.
+
+#### Core / ThemesContract
+
+Here is the definition of the theme contract, the tokens provider and abstract entities.
+
+#### Core / Tokens / ComponentTokens
+
+Here are the definitions of the tokens used for components styling and look and feel.
+
+#### Core / Tokens / SemanticTokens
+
+Here are the definitions of the tokens used by component tokens, pointing to raw tokens.
+
+#### Core / Tokens / RawTokens
+
+Here are the definitions of the tokens pointing to raw values like strings, floats and ints, used by semantic tokens.
+
+#### Foundations
+
+Here are some shared logics and objects with plenty of extensions and utilities used everywhere.
+
+### 2.2 Architecture guidelines
+
+- SwiftUI is the default UI paradigm - embrace its declarative nature
+- Avoid legacy UIKit patterns and unnecessary abstractions
+- Focus on simplicity, clarity, and native data flow
+- Let SwiftUI handle the complexity - don't fight the framework
+- Organize by components, keeps things isolated
+- Keep related code together in the same file when appropriate
+- Use extensions to organize large files
+- Follow Swift naming conventions consistently
+
+## 3. Build verification process ⚠️ CRITICAL
+
+**IMPORTANT**: When editing code, you MUST:
+1. Format the sources
+2. Build the project after making changes
+3. Fix any compilation errors before proceeding
+4. Run the tests
+5. Run the linter and fix any warnings and errors
+
+## 4. Best practices
+
+### 4.1 DO
+
+- Write documentation in Swift DocC format for public API
+- Use Swift's type system for safety
+- Use public modifier only when needed, prefer internal or private
+- **IMPORTANT**: The project supports iOS 26 SDK while maintaining iOS 15 as the minimum deployment target. Use `#available` checks when adopting iOS 15+ APIs.
+- **IMPORTANT**: The project runs for iOS / iPadOS, macOS, visionOS, tvOS and watchOS. Use `#if os` checks to compile only code available for specific API / OS
+- If a third party dependency is added or updated, update the Software Bill of Material
+- Apply Clean Code, DRY, SOLID and TDD principles
+
+### 4.2 DON'T
+
+- Add abstraction layers without clear benefit
+- Use Combine for simple async operations
+- Overcomplicate simple features
+- Use UIKit except for some specific API related to accessibility if needed
+
+## 5. Ecodesign basics 🟡 RECOMMENDED
+
+### 5.1 Animations
+
+- Use native / system animations if animations must be used
+
+### 5.2 Bad patterns
+
+- Prefer pull to refresh instead of infinite scroll
+- Avoid autocompletion if it makes network requests
+
+### 5.3 Cache
+
+- For heavy objects or costly objects to compute (data from networks, date formatters, etc.), use cache like `NSCache`
+- For HTTP requests, use also HTTP cache
+
+### 5.4 CPU
+
+- Distribute tasks across different threads to free the CPU up as soon as possible
+- Don't use the CPU unnecessarily
+- Use app lifecycle to stop background tasks
+
+### 5.5 Downloads
+
+- Avoid automatic download
+- Prefer download on Wifi networks
+
+### 5.6 Energy
+
+- Never ignore low energy mode
+- If this mode is enabled, disable animations, intensive tasks, display of images and videos, cellular connections, HD / 4K (and above) features, use low colors instead of high (overall on Android with AMOLED screens)
+- Avoid forcing the brightness to maximum
+
+### 5.7 Fonts
+
+- Prefer system fonts if possible, but in OUDS context use still the view modifiers and provided typography
+- Use WOFF2 otherwise
+
+### 5.8 Network connections
+
+- Prefer wired and Wi-Fi connections to cellular connections
+- If using a cellular connection, group requests as much as possible to avoid the device constantly being connected to the cell tower
+- Use data caching and Gzip compression
+- Avoid periodic polling to prevent rapid battery drain
+- Avoid maintaining connections; services like Apple Push Notifications and Firebase Cloud Messaging can help
+
+### 5.9 Notifications
+
+- Reduce as much as possible use of notifications
+
+### 5.10 OS support
+
+- Support iOS 15
+
+### 5.11 Resources
+
+- Use SVG images, otherwise use SF Symbols
+- Prefer MP3 for sounds
+- Prefer lazy loading of resources
+- Prefer low resolutions for videos
+
+### 5.12 Screens
+
+- Manage at least small screen like the iPhone SE 2026 one (i.e. 4 inch)
+
+### 5.13 UI
+
+- With dark mode implementation, use true dark colors (e.g. #00000000)
+
+### 5.14 Web views
+
+- Avoid use of web views
+
+## 6. Accessibility basics 🔴 MANDATORY
+
+Everything is available on [our guidelines](https://a11y-guidelines.orange.com/fr/mobile/ios/developpement)
+
+### 6.1 Colors and texts
+
+- For dark mode, reduce contrasts to avoid halo effects
+- Prefer WCAG AAA 7:1 ratio for normal text (ratio between text and backgrounds)
+- Prefer WCAG AAA 4.5:1 ratio for large text (ratio between text and backgrounds)
+- Otherwise apply WCAG AA 4.5:1 for normal text and 3:1 on large text (more than 24 px or 19 px if bold)
+
+### 6.2 Components
+
+- Do not forget to define accessibility hint, label, value and if needed trait
+
+### 6.3 Dates and figures
+
+- For texts or figures, define the suitable accessibility value with formatter (like `DateFormatter`) to fully vocalize content for the user with its locale
+
+### 6.4 Display
+
+- Do not force app in portrait mode
+- App must be usable in landscape mode
+
+### 6.5 Haptics
+
+- Use haptics / vibrations when data are loaded, error occurred, elements have been tapped / activated, etc
+
+### 6.6 Medias
+
+- Avoid autoplay of videos
+- Define accessibility labels for images if they are not decorative, otherwise hide them from VoiceOver
+
+### 6.7 User settings
+
+- If accessibility settings reduce animations, reduce animations
+- If accessibility settings reduce haptics, reduce haptics
+
+### 6.8 Texts
+
+- Texts must not have frozen size, they must adapt following the dynamic type
+
+## 7. Development requirements
+
+- Minimum Swift 6.2 (e.g. 6.2.3)
+- Xcode 26.2 or later
+- Minimum deployment: iOS 15.0, iPadOS 15.0, macOS 13.0, visionOS 1.0, watchOS 11.6, tvOS 16.6
+- Apple Developer account for device testing
+
+## 8. Building commands
+
+### 8.1 Building Swift Package
+
+To build the Swift Package:
+```shell
+bundle install
+bundle exec fastlane build
+```
+
+### 8.2 Run tests
+
+To run the unit tests on the Swift Package:
+```shell
+bundle install
+bundle exec fastlane test_unit
+```
+
+### 8.3 Build documentation
+
+To build the documentation:
+```shell
+cd scripts
+yes | ./generateWebDocumentation.sh --libversion=none --nozip
+```
+
+### 8.4 Check dead code
+
+To check for dead code:
+```shell
+bundle install
+bundle exec fastlane check_dead_code
+```
+
+### 8.5 Format the sources
+
+To format the source code:
+```shell
+bundle install
+bundle exec fastlane format
+```
+
+### 8.6 Run linter
+
+To run the linter:
+```shell
+bundle install
+bundle exec fastlane lint
+```
+
+### 8.7 Check leaks
+
+To check for leaks of secrets:
+```shell
+bundle install
+bundle exec fastlane check_leaks
+```
+
+### 8.8 SBOM update
+
+To update the Software Bill of Materials:
+```shell
+bundle install
+bundle exec fastlane update_sbom
+```
+
+## 9. Review guidelines
+
+- [ ] Check if sources are formatted
+- [ ] Run linter, no error must appear
+- [ ] Run tests, they must all pass
+- [ ] Check if there is dead code and leave a comment saying the elements which seem to be dead / not used
+- [ ] Build documentation, no error must appear
+- [ ] Check leaks, no leak must appear
+- [ ] Check if functions are too long or too complicated, complexity must be low
+- [ ] Check if the commit has been signed-off (i.e. DCO applied) by all commits authors

.github/workflows/build-and-test.yml

@@ -61,9 +61,9 @@ jobs:
           sudo xcode-select -s /Applications/Xcode_26.2.app/Contents/Developer
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0, https://github.com/ruby/setup-ruby
+        uses: ruby/setup-ruby@eab2afb99481ca09a4e91171a8e0aee0e89bfedd # v1.296.0, https://github.com/ruby/setup-ruby
         with:
-          ruby-version: '4.0.1'
+          ruby-version: '4.0.2'
 
       - name: Install Fastlane
         run: |
@@ -86,9 +86,9 @@ jobs:
           sudo xcode-select -s /Applications/Xcode_26.2.app/Contents/Developer
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0, https://github.com/ruby/setup-ruby
+        uses: ruby/setup-ruby@eab2afb99481ca09a4e91171a8e0aee0e89bfedd # v1.296.0, https://github.com/ruby/setup-ruby
         with:
-          ruby-version: '4.0.1'
+          ruby-version: '4.0.2'
 
       - name: Install Fastlane
         run: |