mobile: fix macos build for open source contributors (#39658)

Commit Message: fix macos build for open source contributors
Additional Description:
This PR fixes the build of the example `fetch_client` on macOS.

- Adds an XCode version that can run on modern machines
- Removes the C++17 restriction intended for Android that was breaking
the build because of modern constructs.
- Upgrades macos_minimum_os to 13.4 because it's using APIs not
supported in older versions.
- Adds the missing dependency on `CFNetwork` to
`apple_proxy_resolution_lib`.

Risk Level: Low
Testing:

Built and ran the fetch_client on macOS:
```
./bazelw run //examples/cc/fetch_client -- https://google.com
```

Docs Changes: N/A

Release Notes:
Fixed library dependency that can prevent builds from succeeding.

Platform Specific Features: No new features

[Optional Runtime guard:]
[Optional Fixes #Issue]
[Optional Fixes commit #PR or SHA]
[Optional Deprecated:]
[Optional [API
Considerations](https://github.com/envoyproxy/envoy/blob/main/api/review_checklist.md):]

---------

Signed-off-by: Vinicius Fortuna <[email protected]>
Signed-off-by: Vinicius Fortuna <[email protected]>

Author: fortuna

mobile/.bazelrc

@@ -20,12 +20,11 @@ build --features=debug_prefix_map_pwd_is_dot
 build --features=swift.cacheable_swiftmodules
 build --features=swift.debug_prefix_map
 build --host_force_python=PY3
-build --macos_minimum_os=13.3
+build --macos_minimum_os=13.4
 build --ios_minimum_os=16.3
 build --ios_simulator_version=17.4
 build --verbose_failures
 build --workspace_status_command=../bazel/get_workspace_status
-build --xcode_version=15.3
 build --use_top_level_targets_for_symlinks
 build --experimental_repository_downloader_retries=2
 build --define=google_grpc=disabled
@@ -42,7 +41,7 @@ build --swiftcopt=-wmo
 build --repo_env=JAVA_HOME=../bazel_tools/jdk
 build --define disable_known_issue_asserts=true
 # Temporarily set to C++17 because Android NDK does not fully support C++20 yet.
-build --cxxopt=-std=c++17 --host_cxxopt=-std=c++17
+build:android --cxxopt=-std=c++17 --host_cxxopt=-std=c++17
 # Unset per_object_debug_info. Causes failures on Android Linux release builds.
 build --features=-per_object_debug_info
 # Suppress deprecated declaration warnings due to extensive transitive noise from protobuf.

mobile/ci/BUILD

@@ -1,5 +1,14 @@
 licenses(["notice"])  # Apache 2
 
+xcode_version(
+    name = "xcode_16_1_0",
+    default_ios_sdk_version = "18.1",
+    default_macos_sdk_version = "14.4",
+    default_tvos_sdk_version = "17.4",
+    default_watchos_sdk_version = "10.4",
+    version = "16.1",
+)
+
 xcode_version(
     name = "xcode_15_3_0",
     default_ios_sdk_version = "17.4",
@@ -13,6 +22,7 @@ available_xcodes(
     name = "local_xcodes",
     default = ":xcode_15_3_0",
     versions = [
+        ":xcode_16_1_0",
         ":xcode_15_3_0",
     ],
 )
@@ -21,6 +31,7 @@ available_xcodes(
     name = "remote_xcodes",
     default = ":xcode_15_3_0",
     versions = [
+        ":xcode_16_1_0",
         ":xcode_15_3_0",
     ],
 )

mobile/library/common/network/BUILD

@@ -154,6 +154,12 @@ envoy_cc_library(
         ],
         "//conditions:default": [],
     }),
+    linkopts = select({
+        "@envoy//bazel:apple": [
+            "-framework CFNetwork",
+        ],
+        "//conditions:default": [],
+    }),
     repository = "@envoy",
     deps = select({
         "@envoy//bazel:apple": [